Beverly Crest Shooting: UHNW Home Response Lessons
A gate is designed primarily to control access.
That matters.
But a gate cannot stop every threat that can affect a family inside the property.
The March 2026 shooting at Rihanna’s Beverly Crest residence is a strong example of why residential security also has to think about what can happen from outside the property line.
According to the Los Angeles County District Attorney, prosecutors allege that Ivanna Lisette Ortiz of Orlando drove to the front of Rihanna’s residence in Beverly Crest at approximately 1:20 p.m. on March 8 and fired a semiautomatic rifle multiple times toward the property.
Rihanna, her partner A$AP Rocky, their children and several other people were at the property or an adjacent home.
No one was struck.
Ortiz has pleaded not guilty, and the allegations have not been proven in court. The grand jury indictment was returned on June 18 and unsealed September 30. It charges Ortiz with one count of attempted murder, 10 felony counts of assault with an assault weapon and three felony counts of shooting at an inhabited dwelling or camper. Bail was set at $2.65 million, and the District Attorney listed an October 29 pretrial hearing.
Associated Press reporting says at least 20 rounds were allegedly fired. Bullets struck an Airstream trailer where Rihanna and Rocky were located and the exterior of a nursery where their three children and a nanny were present. No one was injured.
That is a near miss in the most literal sense.
And from a protection standpoint, that makes this incident useful for examining a very specific problem that is different from burglary, home invasion or unauthorized entry:
What happens when the threat does not need to defeat the gate because it can affect the household from outside the property?
I am not going to speculate about what security systems, personnel or procedures were present at Rihanna’s home.
The public information does not support that.
I also do not need to speculate about motive. Prosecutors have alleged attempted murder, but motive remains an issue for investigators and ultimately the court.
What I can do is explain how I would assess this type of event for a high-net-worth or ultra-high-net-worth household.
The questions are different from the ones I ask after a burglary.
Where was everybody?
Which occupied spaces were exposed?
How quickly could family members move away from the danger?
Who was responsible for the children?
Could the household account for everyone?
Who called 911?
Did security know where the threat was coming from?
Could people move without crossing the exposed area?
Could responders reach the correct property quickly?
Was useful video preserved?
Did the protection team capture information about the vehicle?
And what changed before the family returned to normal life?
Those are the issues this article focuses on.
Key takeaways
- The property line does not define the threat line. A residence can have excellent access control and still face danger originating from a public roadway, adjacent property or other external location.
- Interior occupancy matters. Security should understand where family members, children, staff and guests normally spend time, not just where doors and cameras are located.
- Families need immediate refuge options. The first protective movement may simply be getting people away from exterior exposure and into a more protected interior position.
- Children require assigned responsibility. During an emergency, a nanny, parent and protector cannot each assume someone else has the children.
- Large residences create accountability problems. Family members and staff may be spread across several rooms, floors or separate structures when an incident begins.
- Know the correct jurisdiction. Beverly Crest is part of the City of Los Angeles, not the City of Beverly Hills. A family office should know exactly which agencies respond to each residence.
- Communications should be simple. Someone needs to call 911, someone needs to communicate internally and someone needs to maintain the family picture.
- Roadway awareness can matter. Public reporting says a witness saw the alleged shooter’s vehicle moving along the street before the gunfire. That does not prove surveillance, but it shows why activity immediately outside the estate can matter.
- Video has value after the incident too. Roadway-facing footage, license plates, timestamps and vehicle descriptions can become important investigative information.
- A near miss should trigger a full incident review. No injuries does not mean the system should simply return to normal.
What prosecutors allege happened at Rihanna’s Beverly Crest home
The Los Angeles County District Attorney says Ortiz arrived at the 9500 block of Heather Road at approximately 1:20 p.m. on March 8 and fired multiple rounds toward Rihanna’s residence.
The incident occurred in broad daylight.
Rihanna, A$AP Rocky, their children and other people were present either on the property or at an adjacent residence.
No one was struck.
Ortiz was arrested later in Sherman Oaks.
The Los Angeles Police Department Robbery-Homicide Division continues to investigate the case.
Later reporting provided additional detail.
Associated Press reported that shots struck a trailer occupied by Rihanna and Rocky and the exterior of a nursery containing the couple’s three young children and a nanny.
The Los Angeles Times reported from police records that the Airstream sustained three bullet impacts to the windshield and side and that those rounds did not penetrate the vehicle. Rihanna told police that she heard the gunfire, woke Rocky, got them down and then moved with him toward the residence to check on their children.
That sequence is important from a residential-protection perspective.
The family was not all in one room.
Adults were in one structure.
Children and a nanny were elsewhere.
Gunfire affected more than one occupied area.
That immediately turns the incident into an accountability and movement problem, not simply a perimeter-security problem.
The alleged shooter was outside the residence
Early Los Angeles Times reporting said LAPD radio traffic described shots being fired from a vehicle across the street from the property’s gate.
The reported impacts included the gate and an RV on the property. Later police information identified additional impacts elsewhere at the residence.
This is what makes the incident fundamentally different from a home invasion.
The alleged attacker did not first need to enter the property.
She did not need to defeat a front door.
She did not need to overcome an alarm system.
She did not need to walk into the residence.
The threat was able to affect occupied areas from outside.
A strong gate does not solve an external line-of-fire problem
This does not mean gates are ineffective.
A gate has a job.
Control access.
Create separation.
Provide delay.
Support visitor management.
A gate should be judged on how well it performs those functions.
But security becomes weaker when people assume one layer protects against threats it was never designed to stop.
If the threat is outside the gate and the danger can reach occupied parts of the property without crossing the boundary, I need to look at a different set of protective questions.
The key issue is occupied-space exposure
When I review a residence for this type of scenario, I am interested in where people actually live.
Not just architecture.
Occupancy.
Where do the children spend time?
Where is the nursery?
Where does the family eat?
Where does the principal work from home?
Where does household staff spend time?
Where do people gather during the afternoon?
Where do guests sit?
Are detached structures routinely occupied?
Does the family use an exterior patio every evening?
Security systems are often designed around entrances because entrances are easy to identify.
People do not live only at entrances.
Exterior exposure should be evaluated against real household use
I am not interested in publishing detailed firing angles, weak walls or other information that could be useful to somebody planning an attack.
A professional assessment can still evaluate exposure without turning the assessment into a roadmap.
Some rooms may be substantially more exposed to public approaches than others.
Some structures may sit closer to a roadway.
Some outdoor living spaces may be clearly visible.
Other parts of the residence may naturally provide much more separation.
The family needs to understand those differences at the level necessary to make good protective decisions.
This is different from a traditional perimeter assessment
I already look at perimeter security as part of a complete estate assessment.
That is not the central lesson here.
The more specific issue is what happens when the protective boundary has not been physically breached.
A person outside the estate can still:
fire into the property;
throw something over a wall;
operate a drone;
observe a family member;
damage vehicles;
or create another emergency without ever entering.
Residential protection has to understand threats that cross the boundary even when the person does not.
The first protective action may be movement inside the home
People often imagine residential emergencies beginning with security personnel confronting somebody outside.
That may not be the most important first action.
If gunfire begins, the immediate priority may simply be getting the family away from exposed areas.
The correct movement depends on the residence and location of the threat.
But the household should not be inventing the idea of interior refuge for the first time while rounds are striking the property.
Interior refuge does not automatically mean a panic room
This is another area where the security industry can overcomplicate things.
Some residences may justify a purpose-built safe room.
Others may not.
I am more interested in whether the family understands practical safer locations inside the specific home.
If danger is outside one side of the property, can people move deeper into the structure without crossing toward the danger?
Can interior doors create additional separation?
Can people communicate once they move?
Can they remain there until the situation is understood?
Can security account for them?
A protected interior area is useful only if people can actually reach it quickly.
Do not design refuge in isolation from normal family life
A technically excellent refuge location can still fail if:
children cannot reach it;
an elderly family member cannot move there;
the nanny does not know it exists;
household employees have never been briefed;
the communication system does not work there;
or everyone is usually in another part of the property.
The protective plan has to fit the people who live there.
Large homes create a family-accountability problem
One of the biggest differences between protecting a large estate and a small home is physical separation.
The principal may be in an office.
The spouse may be outside.
One child may be upstairs.
Another may be with a nanny.
The chef may be in the kitchen.
A housekeeper may be in a detached guest house.
A contractor may be working near the garage.
Then the incident begins.
Who knows where everyone is?
Someone needs to own accountability
During an emergency, several people may have protective responsibilities.
Residential security.
Executive protection.
Estate manager.
Parents.
Nanny.
House manager.
But if everybody assumes somebody else has accountability, nobody has accountability.
I want a clear answer:
Who maintains the family picture?
Children need assigned adults
This is particularly important.
I do not want three adults all running toward the same child while another child remains somewhere else.
Nor do I want a nanny leaving children because she assumes the principal wants her to check on someone else.
Roles should make sense for the household.
They do not need to be complicated.
Parent A has one responsibility.
Nanny has another.
Security has another.
Everyone understands it.
Children should receive age-appropriate instructions
I would never brief young children on detailed attack scenarios.
That is unnecessary.
A child may only need to know:
If this adult tells you to come with them, go immediately.
If you hear the emergency instruction, move here.
Stay with the adult.
Do not go looking for Mom or Dad.
Simple actions.
The adults carry the complexity.
Guests create another accountability problem
UHNW residences often have people on property who do not know the security plan.
Friends.
Business associates.
Children’s friends.
Tutors.
Event personnel.
Contractors.
If a serious incident begins, somebody may need to move people who have no idea where to go.
The household plan should account for that without turning every dinner guest into a security trainee.
Separate structures need to be included
The Rihanna case involved both the main residential environment and an Airstream on the property.
Large estates frequently include:
guest houses;
pool houses;
gyms;
offices;
studios;
garages;
staff quarters;
security posts;
and other detached structures.
The family may be distributed among them.
Security should know which structures are occupied and how communication works between them.
An emergency plan that only covers the main house is incomplete
Suppose a child is in the guest house.
Does the nanny have a radio?
Cellular phone?
Can security communicate directly?
Does that structure have an interior location suitable for temporary refuge?
Would getting back to the main residence require crossing an exposed area?
Those questions should be answered during planning.
The threat location determines whether people move or stay
I do not believe in one universal residential emergency instruction.
“Everyone go to the safe room.”
What if reaching it requires crossing the exposed side of the house?
“Everyone evacuate.”
What if leaving sends the family toward the gunfire?
Security procedures need enough flexibility to account for where the danger actually is.
People should move away from the problem, not toward family instinctively
This can be emotionally difficult.
A parent hears gunfire and instinctively moves toward a child’s room.
That may be necessary.
It may also require moving through exposure.
That is exactly why child accountability and designated adult responsibilities should already exist.
The goal is to reduce the number of people improvising dangerous movements because nobody knows who is responsible for whom.
Communication needs to be simple under stress
In a complex residence, normal communication may involve:
phones;
radios;
intercoms;
household applications;
security applications;
and face-to-face communication.
During a serious emergency, complexity becomes a problem.
Who needs to know what?
Security needs the threat location.
The family needs the immediate instruction.
911 needs the address and incident information.
The mobile executive protection team may need to know whether returning home is safe.
Everyone does not need to talk to everyone.
One person should contact 911
That does not mean other witnesses should remain silent if they have important information.
It means the household should not waste the first moments assuming somebody else made the call.
The Los Angeles County Fire Department currently advises callers to provide 911 with the callback number and exact incident location when using a cellular phone because cellular calls do not always automatically provide accurate location information. It also notes that text-to-911 is available for situations in which an audible call cannot safely be made or for people with hearing or speech impairments.
For an estate, I would make the instruction even more practical.
Know the exact address.
Know the gate.
Know how responders enter.
Know who will meet them if that can be done safely.
Large estates should not assume responders know which structure needs help
Street address gets responders to the property.
That may not get them to the incident.
Some estates have:
several gates;
multiple buildings;
long driveways;
private roads;
and several occupied structures.
If someone is injured in a detached structure, responders need useful information.
Know the actual law-enforcement jurisdiction
This incident also illustrates a basic issue that matters around Beverly Hills.
Rihanna’s residence is in Beverly Crest.
Beverly Crest is part of the City of Los Angeles, not the City of Beverly Hills. Los Angeles City Planning places Beverly Crest within the Bel Air-Beverly Crest planning area, and city materials identify Beverly Crest as a Los Angeles neighborhood.
The case is being investigated by the Los Angeles Police Department.
That sounds like a small technical distinction.
It is not.
Families living in Beverly Crest, the Beverly Hills Post Office area, Bel Air or other neighboring communities should understand exactly which police and fire agencies serve the property.
Do not let the mailing address, ZIP code or neighborhood branding create confusion during an emergency.
Every residence should have a jurisdiction card
This can be extremely simple.
Exact property address.
Police jurisdiction.
Fire and EMS jurisdiction.
Emergency number.
Non-emergency police number.
Primary gate.
Secondary access if relevant.
Emergency contact inside the residence.
Security contact.
The information should be available to the people who may actually need it.
Beverly Crest terrain adds another operational consideration
Los Angeles City Planning describes the broader Bel Air-Beverly Crest area as a collection of hillside and canyon residential neighborhoods. Historical planning material for the Beverly Crest residential district describes steep topography and winding streets following the natural contours of the hills.
I am not claiming that every Beverly Crest property has a difficult emergency approach.
The practical point is that hillside estates should verify responder access rather than assume it.
Can fire apparatus reach the gate?
Can police vehicles stage?
Does a parked service truck block the narrow approach?
Can an ambulance turn around?
Those are property-specific questions.
Daytime attacks deserve serious attention
The alleged Rihanna shooting occurred at approximately 1:20 in the afternoon.
That matters because residential security can become psychologically oriented toward nighttime.
After dark feels dangerous.
Daytime feels normal.
But daytime is when many large estates are most operationally active.
Household staff are present.
Contractors are present.
Deliveries arrive.
Children may be home.
Gates open more frequently.
Staff move across outdoor areas.
A daytime security program cannot operate as though everyone threatening will wait until 2 a.m.
Residential security staffing should reflect actual household activity
This does not mean every family automatically needs additional daytime personnel.
It means the assessment should understand when the residence is busiest and when the principal and family are actually present.
If the home is essentially a workplace from 7 a.m. until 6 p.m., that operating reality belongs in the security design.
Public reporting described activity before the shooting
The Los Angeles Times reported that LAPD Chief Jim McDonnell said a witness observed the alleged suspect driving up and down the street outside Rihanna’s home before the shooting.
After the vehicle fled, police broadcast its description. A license-plate reader reportedly detected the vehicle in Benedict Canyon, and an LAPD helicopter tracked it before officers arrested Ortiz in Sherman Oaks.
I would be careful with how we interpret that.
Driving up and down a street before an incident does not automatically tell us what the person’s complete preparation consisted of.
But for a protected residence, repeated unusual activity immediately outside the property can be worth documenting.
Roadway-facing cameras can have investigative value
Many estate camera systems concentrate heavily on people already approaching gates or doors.
After a serious exterior incident, the more useful question may be:
What happened on the street immediately before and after?
What vehicles were present?
Did one pass several times?
Can we see direction of travel?
Do we have a usable timestamp?
Can we provide investigators with a clear image?
The point is not to turn a private residence into a municipal surveillance system.
It is to make sure cameras protecting the property can produce useful information when something serious occurs nearby.
Video should be preserved immediately after a major incident
Modern security systems overwrite footage.
After gunfire, there should be no debate about whether the event might become important later.
Preserve the relevant period.
Before the incident.
During it.
After it.
Multiple cameras.
Access logs.
Intercom events.
Vehicle-gate activity.
Do it before normal retention removes useful evidence.
Staff observations matter too
The gardener saw a vehicle earlier.
The nanny heard the shots from another location.
A housekeeper saw which direction the vehicle left.
A protector knows which family members were outside shortly before the incident.
Those observations should be captured promptly.
Not turned into a group discussion where everyone’s memories start blending together.
Document facts before interpretations
“White Tesla passed the entrance three times between 1:05 and 1:15.”
Useful.
“The attacker was conducting surveillance.”
That may or may not ultimately be true.
Security reporting should preserve what people actually saw.
The physical scene should be preserved where appropriate
After a shooting, the residential team is not there to collect bullets or conduct its own criminal investigation.
Protect the people.
Contact law enforcement.
Do not unnecessarily disturb areas that may contain evidence.
Provide camera footage, access records and witness information to investigators through the appropriate process.
Nearby properties may become part of the incident
Early reporting said rounds also struck a neighboring property, and the District Attorney says people were present at an adjacent home.
This is another difference between an external attack and an intrusion contained inside one estate.
Violence originating from a public street can affect several properties.
Neighbors may become witnesses.
Neighbors may themselves be exposed.
A neighboring camera may capture the most useful view.
Emergency vehicles may stage on shared or narrow roads.
Neighbor relationships can have legitimate security value
I am not advocating turning the neighborhood into a private intelligence network.
A trusted neighbor knowing how to reach the estate manager during a serious emergency can be useful.
So can knowing which neighboring properties have cameras covering the road.
That relationship should remain professional and appropriate.
Do not build the program around the assumption that security will intercept the attacker
This is important.
Protective success is not always:
“The guard stopped the person before anything happened.”
Sometimes security has almost no warning.
In that situation, survival depends on what happens after the first indication of danger.
Communication.
Movement.
Accountability.
Interior protection.
Law-enforcement response.
The program should be strong enough to function even when prevention fails.
Protective depth matters more than one dramatic defensive feature
A family could spend enormous amounts of money on one feature.
Ballistic glass.
A highly fortified safe room.
Massive gates.
Those may be appropriate on some properties.
But I would not recommend them simply because a celebrity home was shot at.
The threat profile and architecture need to justify them.
Sometimes procedural problems deserve attention first.
Does the nanny know what to do?
Can security locate the children?
Does the household know which rooms create better separation?
Can 911 identify the property correctly?
Do responders have access?
Those questions may matter before a major construction project does.
Ballistic upgrades require professional design
If an assessment identifies a legitimate ballistic concern, I want qualified architectural, engineering and security professionals involved.
Ballistic protection is not simply buying thicker glass.
Windows, frames, walls, doors and structural interfaces work together.
There can also be fire, egress, weight, code and usability considerations.
It should be engineered properly for the actual requirement.
Do not create a fortress without understanding the problem
This is one of my recurring principles in UHNW residential protection.
The objective is not maximum hardening.
The objective is appropriate protection.
A family should still be able to live in the home.
Children should not grow up inside a bunker unless the threat genuinely requires that level of protection.
Home emergency procedures need trigger language
One problem with emergency plans is that people do not know when the plan begins.
Is that fireworks?
A car backfiring?
Construction?
Gunfire?
I do not want the household holding a committee meeting to decide.
If someone responsible for security reasonably believes a serious immediate threat exists, the household should be able to initiate protective action first and clarify the situation second.
False alarms can be reset
This needs balance.
I do not want people running into refuge every time a delivery truck drops a package.
But the emergency process should tolerate a reasonable false activation better than it tolerates paralysis during a real shooting.
Security personnel need authority appropriate to their role.
Use simple internal terminology
The household does not need a dictionary of tactical code words.
If internal terms are used, everyone who may need them must understand them.
The instruction should cause action, not confusion.
Executive protection and residential security need to connect immediately
If the principal is away when something occurs at the residence, the mobile executive protection team needs to know before returning.
Do not drive the principal back toward an unresolved incident simply because home was the planned destination.
Likewise, if the principal is home and the spouse is away, the mobile team needs to understand whether returning is appropriate.
The front gate should not be the information boundary
Residential security sees one environment.
The mobile detail sees another.
The family office sees travel and schedules.
They need enough shared information to make coherent decisions.
The family office may become the coordination hub
During a serious residential incident, somebody outside the immediate tactical problem may be best positioned to coordinate:
relatives;
alternate lodging;
transportation;
legal counsel;
public relations;
school changes;
staffing;
and the principal’s next movements.
That is often a family-office function.
The family may not return home immediately
This needs to be considered before it happens.
After a major attack, investigators may control part of the property.
Some areas may be damaged.
The family may simply not feel comfortable returning immediately.
Where do they go?
Hotel?
Secondary residence?
Friend’s home?
Another protected property?
Does the protection team know how to support that?
Post-incident relocation should preserve security
A family should not leave a secure estate under emergency conditions and move into a location with uncontrolled access without anyone considering the consequences.
Alternate lodging should be thought through.
Especially for a highly recognizable principal.
Children may need normalcy quickly
A serious incident at home is traumatic even when nobody is physically injured.
Protection planning should account for quality of life after the immediate danger passes.
Where can the children sleep?
Can school continue?
Who stays with them?
Does the family need more privacy temporarily?
That is part of supporting the family, even if it is not traditionally described as physical security.
Do not publicly explain the new security posture
After a high-profile incident, media interest increases.
People naturally ask:
Were guards present?
How many?
Has security doubled?
Where is the family staying?
What changes were made?
A protection program should resist the urge to prove how secure the family now is by publicly describing the system.
The public does not need an operational briefing.
Information exposure after an incident often increases
Media photograph the property.
News helicopters show entrances.
Street layouts become familiar.
Articles identify neighborhoods.
Social media discusses the family.
That does not mean every detail can be hidden.
It does mean the protection team should understand that the information environment has changed.
The Rihanna case included prior public social-media activity
Los Angeles Times reporting says Ortiz had made angry social-media posts about Rihanna in the weeks before the alleged shooting. Authorities had not publicly established a motive at the time of the reporting.
I am deliberately not making that the central subject of this article.
Protective intelligence around online fixation deserves its own detailed analysis and should not be reduced to:
“Someone posted something negative, therefore an attack should have been predicted.”
That would be far too simplistic.
The relevant point here is narrower:
After a major residential attack, the protection review should include the information environment as well as the physical scene.
Review what was known before the incident
What communications existed?
Were there prior approaches?
Did staff report anything?
Were unusual vehicles observed?
Did public posts identify the residence?
Was anything seen but dismissed?
The purpose is not to blame somebody with hindsight.
The purpose is to improve future collection and reporting.
Near misses deserve the same professional review as injuries
No one was struck in the alleged March shooting.
That is extremely fortunate.
But protection programs sometimes learn less from near misses because everybody wants to move on.
“Nobody got hurt.”
“The suspect was arrested.”
“Everything is okay.”
That is exactly when complacency can return.
I want a structured after-action review
What happened?
What did we know first?
Who recognized it?
How long did communication take?
Where was every family member?
Where were staff?
Who called 911?
Did anyone move toward danger unnecessarily?
Did cameras capture useful information?
Did access systems continue working?
Did security communicate with the mobile detail?
Could law enforcement enter efficiently?
Did anyone lack necessary information?
What should change?
An after-action review should not become a blame session
People behave differently under sudden stress.
A nanny may do something unexpected.
A protector may miss a radio call.
A family member may ignore an instruction because a child is elsewhere.
The objective is to understand the system.
If the procedure was unclear, fix the procedure.
If training was insufficient, train.
If communication failed, improve it.
If somebody knowingly ignored an established protective responsibility, address that separately.
Review physical damage with the security assessment
Where rounds actually impacted can provide information about which occupied areas were exposed during the real incident.
That is more valuable than abstract assumptions.
Qualified professionals can use actual incident information to inform decisions about:
interior refuge;
future room use;
architectural improvements;
exterior screening;
and other protective measures.
Again, those findings should remain confidential.
Reassess routine use of affected areas
Suppose a family spends several hours each day in an area with unusual external exposure.
The answer may be architectural improvement.
It may be landscaping.
It may be moving certain routine activities.
It may be additional detection.
It may be a combination.
I want the solution with the smallest reasonable disruption that materially reduces the risk.
Do not let one rare event distort the entire household
A shooting at a home is serious.
The response should be serious.
That does not mean every window becomes ballistic glass, every exterior area becomes prohibited and children stop using the yard forever.
Security has to remain risk-based.
The incident changes the assessment.
It does not remove professional judgment.
Some protections may be temporary
Additional residential personnel.
Modified movements.
Temporary changes in room use.
Increased roadway observation.
More law-enforcement coordination.
Those measures can be implemented while the broader investigation develops.
Then reassessed.
Other changes may be permanent
Better family accountability.
Clearer emergency roles.
Improved evidence retention.
Correct jurisdiction information.
Better communication between EP and residential security.
Those are useful improvements regardless of whether the specific threat recurs.
What UHNW families can review right now
Identify regularly occupied exterior-facing spaces
Do not publish them.
Internally understand which parts of the residence have greater exposure to public approaches.
Identify practical interior refuge options
Understand where people can move quickly during an external threat.
Assign responsibility for children
Parents, nannies and security should know who does what.
Include detached structures
Guest houses, offices, studios and pool houses belong in the emergency plan.
Create a simple family-accountability process
Who confirms everybody is safe?
Know the correct law-enforcement jurisdiction
Do not assume a 90210 mailing address means Beverly Hills Police Department.
Keep exact emergency address information readily available
Include access instructions appropriate for responders.
Review 911 calling procedures
Make sure callers can provide the exact incident location and callback number.
Review roadway-facing video
Can the system provide useful vehicle information before and after an incident?
Review video retention
Can security preserve footage quickly?
Review daytime staffing assumptions
Who is actually present when the residence is busiest?
Review guest accountability
Someone may need to guide people unfamiliar with the property.
Connect residential and executive protection
A mobile detail should immediately know when returning to the residence is unsafe.
Identify alternate family lodging
Know where the family can go after a serious residential incident.
Protect post-incident operational information
Do not publicly disclose new guard schedules or security upgrades.
Conduct a structured after-action review
Do not wait until memories fade.
How MSB Protection approaches external threats to an estate
At MSB Protection, I do not look at a residence only as a perimeter with a house behind it.
I look at the family living inside the environment.
For an external violence scenario, I want to understand:
public approaches;
occupied areas;
children;
staff locations;
detached structures;
interior movement;
communications;
family accountability;
law-enforcement access;
video evidence;
and continuity after the incident.
The answer may involve residential security.
It may involve executive protection.
It may involve architectural changes.
Technology.
Protective intelligence.
Staff procedures.
Or a broader security assessment.
I do not start by deciding what product to sell.
I start with the exposure.
This is not another general Beverly Hills security article
There are already plenty of reasons an UHNW estate needs strong perimeter security, access control, surveillance and professional residential personnel.
This incident raises a narrower issue.
What happens when the threat never enters?
That is where interior planning becomes important.
The family should be able to survive and function through an external incident even when the gate itself was never defeated.
The objective is to preserve options inside the home
Move away from exposure.
Account for the family.
Communicate.
Call authorities.
Give responders useful access information.
Preserve evidence.
Keep the principal from returning to an unresolved threat.
Then rebuild the protective posture based on what actually happened.
Frequently asked questions
What happened at Rihanna’s Beverly Crest home?
Los Angeles prosecutors allege that Ivanna Lisette Ortiz drove to the front of Rihanna’s Beverly Crest residence on March 8, 2026 and fired a semiautomatic rifle multiple times toward the property. Rihanna, A$AP Rocky, their children and other people were present, but no one was struck. Ortiz has pleaded not guilty.
How many shots were fired?
Associated Press reported that authorities allege at least 20 rounds were fired. Earlier LAPD radio reporting referenced at least 10 shots. The indictment itself is more general and alleges multiple rounds.
Were Rihanna and A$AP Rocky home?
Yes. Public reporting says they were in an Airstream trailer on the property when the shooting occurred.
Were their children home?
Yes. Associated Press reported that their three children and a nanny were inside a nursery whose exterior was struck by gunfire. No one was injured.
Was anyone injured?
No one was reported physically struck by the gunfire.
Has the defendant been convicted?
No. Ortiz has pleaded not guilty and is presumed innocent unless proven guilty. The indictment was unsealed September 30, and the District Attorney listed an October 29 pretrial hearing.
What charges does Ortiz face?
The current indictment includes one count of attempted murder, 10 felony counts of assault with an assault weapon and three felony counts of shooting at an inhabited dwelling or camper.
Was Ortiz found competent to stand trial?
Yes. Recent reporting says a Los Angeles County judge found Ortiz mentally competent to stand trial after earlier competency proceedings had delayed the criminal case.
Has a motive been established?
Authorities had not publicly established a definitive motive in the reporting reviewed for this article. Public reporting has described prior social-media posts involving Rihanna, but those facts should not be used to invent a motive beyond what prosecutors prove.
Is Rihanna’s home actually in Beverly Hills?
No. The residence involved in this case is in Beverly Crest, which is part of the City of Los Angeles. Beverly Crest is adjacent to Beverly Hills and uses a 90210 postal address in parts of the area, which can create confusion. Los Angeles City Planning includes Beverly Crest in the Bel Air-Beverly Crest planning area.
Which police agency investigated the shooting?
The case remains under investigation by the Los Angeles Police Department Robbery-Homicide Division.
Why does jurisdiction matter to a private family?
Because families and staff should know which agency actually responds to each residence. Mailing address, neighborhood name and municipal jurisdiction are not always the same thing around Beverly Hills, Beverly Crest and nearby Los Angeles communities.
Can a gate protect a family from gunfire outside the property?
A gate can control access and create separation, but it cannot by itself address every threat that can originate outside the property. The residence also needs appropriate interior planning and response procedures.
Does this mean every UHNW estate needs ballistic windows?
No. Ballistic upgrades should follow a property-specific threat and vulnerability assessment. They can involve substantial architectural, structural and cost considerations and should be professionally designed where justified.
What is interior refuge planning?
It means identifying practical locations and movements inside a residence that allow family members to increase separation from an external threat while remaining able to communicate and await further direction or emergency response.
Is a safe room required?
Not necessarily. Some estates justify purpose-built safe rooms. Other properties may use different protected interior spaces depending on the architecture and threat profile.
Should children know where to go?
Yes, at an age-appropriate level. Children do not need detailed threat briefings. They need simple instructions they can follow when an adult directs them.
Who should be responsible for children during an emergency?
That should be decided before the emergency. Responsibilities depend on the family structure, but parents, nannies and security personnel should not be left assuming someone else has accountability.
What if family members are in different buildings on the property?
The emergency plan should account for detached structures. Moving everyone immediately to the main residence may not always be safe, depending on where the threat is located.
Should household staff have radios?
That depends on the property and operating model. Large estates with detached structures or professional residential security may benefit from dedicated communication systems, but the technology should match the actual need.
What should someone tell 911?
Provide the nature of the emergency, exact incident address and relevant location details, and give a callback number when using a cellular phone. Follow the dispatcher’s instructions. Los Angeles County Fire specifically reminds cellular callers that automatic location information may not always be sufficient.
Can someone text 911 in Los Angeles?
Los Angeles County Fire states that text-to-911 is available when a person has a hearing or speech impairment or in a life-threatening situation where an audible call cannot safely be made.
Should private security confront someone shooting from the street?
There is no universal tactical response appropriate for every circumstance. The protection team’s priority is protecting the family, communicating the threat and coordinating emergency response. Personnel should not create unnecessary additional exposure merely to pursue an attacker.
Why are roadway-facing cameras important?
They may help document activity immediately outside the property, including vehicles approaching or leaving. That information can become valuable to law enforcement after a serious incident.
Did police use vehicle information in the Rihanna case?
Yes. Los Angeles Times reporting says police broadcast a description of the white Tesla, a license-plate reader detected the vehicle in Benedict Canyon and an LAPD helicopter later tracked it before officers made the arrest in Sherman Oaks.
Does repeated driving near a residence prove surveillance?
No. It is an observation that may or may not become significant depending on context. Security should document facts rather than immediately labeling behavior as surveillance.
How long should camera footage be preserved after an attack?
Potentially relevant footage should be preserved immediately so normal retention does not overwrite it. Long-term retention and disclosure should then be coordinated with legal counsel and law enforcement as appropriate.
Should security collect physical evidence?
Generally, private security should protect the scene and allow law enforcement to conduct the criminal investigation rather than unnecessarily handling potential evidence.
What should happen if the principal is away during an attack on the residence?
The mobile executive protection team should be informed and should reassess whether returning to the property is safe. The original itinerary should not override a developing threat.
What if the family cannot remain at the residence afterward?
The family office should have alternative lodging options that can support the family’s privacy and protection needs rather than improvising after the incident.
Should residential security increase after an incident like this?
Potentially. Temporary or permanent changes should follow a structured review of what occurred, existing vulnerabilities and any continuing threat information. More personnel are not automatically the correct answer.
Should a family change every security system after an attack?
No. Start with the incident. Determine what failed, what worked and which changes would materially reduce future exposure. Avoid purchasing equipment simply because the event was frightening.
What should an after-action review include?
Detection, communications, family accountability, staff actions, video, law-enforcement access, executive protection coordination, physical damage, evidence preservation and any changes required before normal operations resume.
Why review incidents where nobody was hurt?
Because a near miss can reveal vulnerabilities without the human cost of a successful attack. That creates an important opportunity to improve the program.
Should the family publicly describe new security measures?
No operational need usually exists to tell the public about guard schedules, refuge locations, new security technology or other protective changes.
How is this different from a standard Beverly Hills estate security assessment?
The focus here is narrower: external violence affecting occupied portions of a residence without the attacker first breaching the property. The assessment therefore emphasizes interior occupancy, refuge, family accountability, communications and continuity after the incident.
What should a Beverly Crest security assessment review after external gunfire?
Occupied-space exposure, practical interior refuge options, child and staff accountability, communications, responder access, roadway video, detached structures, executive protection coordination and the incident’s actual physical impacts should all be reviewed.
Final thoughts: a secure home still needs options when the threat stays outside
The alleged March shooting at Rihanna’s Beverly Crest home is disturbing because of how close the outcome came to being much worse.
Adults were present.
Children were present.
A nanny was present.
Multiple parts of the residential environment were struck.
No one was physically injured.
That was fortunate.
But from a protection standpoint, “nobody was hurt” cannot be the end of the analysis.
The deeper question is whether a household is prepared for danger that never tries to come through the gate.
That requires a different kind of depth.
Understand where the family actually spends time.
Understand which areas have greater external exposure.
Give people practical places to move.
Assign responsibility for children.
Account for detached structures.
Make communication simple.
Know who calls 911.
Know the correct jurisdiction.
Make sure responders can find and enter the property.
Preserve roadway video and other evidence.
Connect residential security with the mobile executive protection team.
Have another location available if the family cannot stay home.
Then review the incident without ego.
What worked?
What did not?
What almost failed?
What would have happened if someone had been in another part of the house?
What would have happened at night?
What would have happened if the principal had been away?
What happens next time?
A gate is a layer.
A camera is a layer.
A protector is a layer.
None of them can guarantee that another person will not fire a weapon from a public roadway.
The job of professional residential security is to make sure the family still has options when prevention is not enough.
That is the angle I would take from this case.
Sources
About Michael Braun
Michael Braun is a former Special Unit Operator, former Manager at Gavin de Becker & Associates, and Founder & CEO of MSB Protection, an executive protection and residential security firm serving high-net-worth and ultra-high-net-worth clients.
Braun has built his career at the intersection of specialized protective operations, executive protection, residential security, protective intelligence, and security risk management. His experience spans special-unit operations, leadership within Gavin de Becker & Associates, and the development and oversight of private protection programs within demanding UHNW environments.
He has been recognized by The Top 100 Magazine as a leading CEO in the private security field and is the subject of an upcoming Marquis Who’s Who feature highlighting his leadership and contributions to the profession.
Today, Braun is recognized for his work in executive protection, UHNW estate security, residential protection, protective intelligence, adversarial security assessments, and security auditing throughout Beverly Hills and Southern California.
His work focuses on moving private security beyond simply “providing a body” and toward intelligence-led, risk-based protection programs designed to identify vulnerabilities before an adversary can exploit them.
Looking for Executive Protection or Residential Security Services?
If you are a high-net-worth or ultra-high-net-worth individual, family office, estate manager, chief of staff, or executive in Beverly Hills, Los Angeles, Malibu or Southern California, MSB Protection provides executive protection, residential security, 24/7 protection, protective intelligence, medical-readiness planning, and security risk management.
We evaluate the complete security environment, from threat exposure and residential vulnerabilities to personnel, technology, procedures, protective intelligence, and emergency response, and build a program around the risks that actually exist.
Contact us for a confidential consultation or message us at +1 (805) 285-2807.