Sample event security briefing

Demonstration brief — Event, sources and intelligence indicators are synthetic and exist only to illustrate Preventio output.

DISCLAIMER — Information contained in this report is derived from open-source and other available information and should be considered an analytical assessment rather than a guarantee of future events.

TLP:CLEARApproved for public sharing.

Override

Event

International Climate & Security Summit

ClassificationTLP:CLEAR

Location: Geneva Convention Centre, Geneva, Switzerland
Date: 2026-06-14 09:00 CET
Expected attendance: ~2,400 delegates · 40 heads of delegation
Event type: Summit / Conference
Security team: 36 pax
Deployment total: 36 pax

Risk rationale

Credible protest mobilisation and constrained arrival screening are the principal drivers. Probability is raised by announced action and forecast throughput pressure; impact is concentrated at the south gate and delegate movements. Dual-channel screening, police reinforcement and a ready reserve reduce exposure, but protest intent and UAS controls retain residual uncertainty.

← Back to home

Overall risk

6.4/10

HIGH

Level 1 · Read first

Key intelligence

Threat picture

Primary: disruptive protest with possible direct-action splinter.

HIGH

Vulnerabilities

Single-channel south-gate screening; limited vehicular standoff on southern flank; late-add press credentials.

HIGH

Alerts / watch items

Day-1 protest call confirmed (HIGH CONF).

HIGH

Security posture

Stand up dual-channel screening at south gate; pre-position QRF; coordinate TFR with cantonal aviation; re-vet late-add credentials; brief Tier-1 motorcade on Echo-2 alternate.

LOW

Level 2 · Operations picture

Situational awareness map

Event zone / critical point
High risk zone
Medium risk zone
Primary access / transport
Evacuation route / medical
Security position

Venue sits on the Quai Wilson axis with limited vehicular standoff on its southern flank. Two metro stations within 300m create dense pedestrian inflow during morning peaks. Adjacent diplomatic missions extend the protective footprint but also widen the threat surface.

Level 2

Threat landscape

Disruptive protest at venue perimeterHIGH
P High · I Medium · OSINT · conf. high
Lone-actor edged-weapon attack on delegate motorcadeMODERATE
P Low · I High · ASSESSMENT · conf. medium
Cyber-enabled doxxing of attending delegatesMODERATE
P Medium · I Medium · OSINT · conf. high
UAS incursion over venue airspaceHIGH
P Medium · I High · ASSUMPTION · conf. low
Crowd crush at main entrance during arrival peakHIGH
P Medium · I High · ASSESSMENT · conf. high
Insider compromise via accredited press poolMODERATE
P Low · I Medium · VERIFIED · conf. medium

Level 2 · Evidence to action

Threat assessment rationale

Threat 01
High
Disruptive protest at venue perimeter
OSINTHIGH CONF
Prob.High
ImpactMedium
Evidence
Public mobilisation calls and a filed march permit place a 1,500-person action near the south gate on day 1.
Action
Separate protest and delegate flows, reinforce the south perimeter and maintain police liaison for route changes.
Threat 02
Moderate
Lone-actor edged-weapon attack on delegate motorcade
ASSESSMENTMED CONF
Prob.Low
ImpactHigh
Evidence
No event-specific intent is reported; the assessment relies on a recent regional pattern involving diplomatic vehicles.
Action
Use protected routing, vary movement timings and brief escort teams on immediate diversion points.
Threat 03
Moderate
Cyber-enabled doxxing of attending delegates
OSINTHIGH CONF
Prob.Medium
ImpactMedium
Evidence
Monitored channels published a target list naming six delegations and three sponsors.
Action
Notify named parties, reduce exposed personal data and monitor for credential or itinerary publication.
Threat 04
High
UAS incursion over venue airspace
ASSUMPTIONLOW CONF
Prob.Medium
ImpactHigh
Evidence
Previous venue events recorded recreational UAS activity; current airspace restriction coordination is unconfirmed.
Action
Confirm airspace restrictions, establish detection reporting and pre-brief shelter or movement decisions.
Threat 05
High
Crowd crush at main entrance during arrival peak
ASSESSMENTHIGH CONF
Prob.Medium
ImpactHigh
Evidence
The south gate can screen about 480 people per hour against an expected arrival rate of 1,100 per hour.
Action
Open dual-channel screening, meter upstream arrivals and activate overflow routing before the peak window.
Threat 06
Moderate
Insider compromise via accredited press pool
VERIFIEDMED CONF
Prob.Low
ImpactMedium
Evidence
Host liaison reported late-added press credentials and an unresolved vetting backlog.
Action
Re-vet late additions, issue visually distinct passes and require secondary checks for restricted areas.

Level 3 · Context

Situation overview

Three-day multilateral summit convening UN member states, NGOs, and private-sector observers on climate-security linkages. Profile elevated by recent statements from two delegations and active civil-society mobilization in the host city.

Crowd management

Peak inflow 08:15–09:30 on day 1. Recommend dual-channel screening at south gate with overflow routing via Quai Wilson side entrance. Standing capacity in plenary hall is 2,800; do not exceed 2,500 to preserve egress lanes.

VIP protection

40 protectees across 4 tiers. Recommend hardened motorcade for Tier 1 (n=6) with rolling closure on Rue de Lausanne. Tier 2–4 sweep arrivals on staggered 12-minute intervals to avoid arrival-cluster targeting.

Geopolitical impact

Two delegations arrive against backdrop of bilateral tension over disputed maritime claims. Risk of diplomatic incident inside the venue is low; risk of symbolic confrontation in the press scrum is moderate. No state-sponsored physical threat indicators identified at time of assessment.

Level 3 · Geography

Risk concentration heatmap

LowVery high

Tracked threats

High / critical

Timeline peaks

Level 3 · Open sources

OSINT snapshot

7 demo-verified in-scope sources · 1 contextual item

Full source analysis, filters and side-by-side comparison are available in the appendix at the end of this brief.

Level 4 · Sequencing

Critical moments timeline

06:00Venue lockdown & final sweepmoderate
K9 + EOD sweep of plenary and breakouts.
07:30Inner perimeter activemoderate
Credentialed access only. Press pool staged at Gate B.
08:15Delegate arrival window opensmoderate
Peak inflow expected through 09:30.
08:45Tier-1 motorcade movementshigh
Rolling closures on Rue de Lausanne (6 movements).
09:00Plenary opens — highest external visibilityhigh
Protest convergence projected at south gate.
12:30Bilateral side-rooms activemoderate
Two flagged delegations adjacent in Room 4B.
17:00End-of-day egressmoderate
Press scrum risk in north plaza.
19:30Host reception (off-site)moderate
Movement on protected route Echo-2 to Hôtel de Ville.

Level 4 · Action

Security deployment recommendations

36 pax total

Suggested distribution — indicative only. Final team sizing and post allocation remain the responsibility of the on-site security manager and must be validated against venue, regulations and the actual threat picture.

Unit / element	Pax	Mission
Inner cordon — credentialed access	8	Gate access control & screening oversight
Plenary floor close protection	6	Tier-1 protectee coverage inside hall
Motorcade escort element	6	Mobile protection, 3x 2-officer cars
Counter-surveillance team	4	Plainclothes observation south & north perimeters
Medical / TECC element	4	Two 2-person teams, plenary and gate B
TOC / coordination cell	4	Comms, OSINT monitoring, liaison with cantonal police
Reserve QRF	4	Held in venue basement; 90-second response

Level 4 · Prioritisation

Ranked risk register

01Crowd crush at south gate during 08:15–09:30 inflow
02Protest convergence coinciding with plenary opening
03UAS incursion over plenary skylight
04Press-scrum incident at end-of-day egress
05Lone-actor approach on Tier-1 motorcade route
06Doxxing-driven harassment of named delegates
07Insider credential misuse (late-add press)
08Bilateral incident in Room 4B side meeting
09Egress chokepoint in plenary if alarm activates
10Off-site reception movement on Echo-2 route

Level 4 · BLUF

Executive brief

situation: Multilateral summit, 3 days, 2.4k attendees, elevated external attention. Host police reinforced; protective overlay integrates with cantonal command.
threats: Primary: disruptive protest with possible direct-action splinter. Secondary: crowd-density failure at south gate. Tertiary: UAS / cyber-doxxing.
vulnerabilities: Single-channel south-gate screening; limited vehicular standoff on southern flank; late-add press credentials.
alerts: Day-1 protest call confirmed (HIGH CONF). Hacktivist target list published (HIGH CONF). UAS posture unconfirmed (LOW CONF).
actions: Stand up dual-channel screening at south gate; pre-position QRF; coordinate TFR with cantonal aviation; re-vet late-add credentials; brief Tier-1 motorcade on Echo-2 alternate.

Level 5 · Methodology

How is the risk score calculated?

Risk score = Threat × Probability × Impact × Exposure

Level 5 · Provenance

Sources & confidence

Live sources 7

Disruptive protest at venue perimeterOSINTCONFIRMED
Lone-actor edged-weapon attack on delegate motorcadeASSESSMENTASSESSED
Cyber-enabled doxxing of attending delegatesOSINTCONFIRMED
UAS incursion over venue airspaceASSUMPTIONUNVERIFIED
Crowd crush at main entrance during arrival peakASSESSMENTCONFIRMED
Insider compromise via accredited press poolVERIFIEDASSESSED

CONFIRMED — corroborated by two or more independent sources. ASSESSED — analytical judgement from partial reporting. UNVERIFIED — single-source or uncorroborated indication.

Annex · Open sources

Current OSINT review

7 demo-verified in-scope sources · synthetic evidence for product demonstration

Demo data: this event, its sources and verification signals are synthetic. Links use reserved example domains and are not public evidence.

8 of 8 sources

Sort

LOCAL PRESSDemo verified
Civic Monitor · SIMULATED SOURCE · 2026-05-29 · 6 days ago
Coalition announces 'Climate Justice Bloc' action on opening day
Demo monitoring record captures a mobilisation call naming the venue, opening-day timing and south-perimeter assembly point.
Line: Protests & strikesCorroborated by 2+ independent domains
Relevance: Directly identifies the fictional event, date and approach route.
https://example.org/preventio-demo/mobilisation-call
MAJOR OUTLETDemo verified
Geneva Desk · SIMULATED SOURCE · 2026-05-31 · 4 days ago
Local press: police request reinforcements from cantonal authorities
Demo local reporting confirms a fictional request for 180 additional officers across the three-day summit window.
Line: Official advisoriesCorroborated by 2+ independent domains
Relevance: Supports the assessed public-order posture and command requirements.
https://example.net/preventio-demo/police-reinforcement
MAJOR OUTLETDemo verified
Digital Risk Watch · SIMULATED SOURCE · 2026-06-01 · 3 days ago
Hacktivist channel publishes 'corporate enabler' target list
Demo cyber-monitoring record identifies six delegations and three sponsors; no operational capability or timing is established.
Line: Event
Relevance: Informs delegate privacy, credential and communications controls.
https://example.com/preventio-demo/cyber-target-list
OFFICIAL SOURCEDemo verified
Host Authority Bulletin · SIMULATED SOURCE · 2026-06-02 · 2 days ago
Host authority issues summit access and perimeter advisory
Demo advisory describes credential-only access, controlled vehicle approaches and temporary restrictions around the fictional venue.
Line: Official advisoriesCorroborated by 2+ independent domains
Relevance: Defines the fictional operating perimeter and access conditions.
https://example.org/preventio-demo/access-advisory
OFFICIAL SOURCEDemo verified
Geneva Transit Update · SIMULATED SOURCE · 2026-06-02 · 2 days ago
Transit operator forecasts concentrated morning arrivals
Demo service notice anticipates increased passenger volumes between 08:00 and 09:30 at stops serving the summit district.
Line: Transport & cityCorroborated by 2+ independent domains
Relevance: Corroborates the assessed peak-arrival and pedestrian-flow window.
https://example.net/preventio-demo/transit-advisory
OFFICIAL SOURCEDemo verified
Convention Centre Operations · SIMULATED SOURCE · 2026-05-28 · 7 days ago
Venue note confirms dual-use of the south screening area
Demo venue notice states that delegate and supplier processing share the south approach during the opening setup period.
Line: VenueCorroborated by 2+ independent domains
Relevance: Supports the identified access-capacity vulnerability.
https://example.com/preventio-demo/venue-access-note
OFFICIAL SOURCEDemo verified
Summit Media Office · SIMULATED SOURCE · 2026-06-01 · 3 days ago
Accreditation desk extends late press registration window
Demo organiser notice extends the fictional press-registration deadline by 48 hours and requires secondary identity validation.
Line: Event
Relevance: Directly informs the late-add credential assessment and mitigation.
https://example.net/preventio-demo/press-accreditation
LOCAL PRESSDemo verified
Regional Event Review · SIMULATED SOURCE · 2026-05-22 · 13 days ago
Previous summit records short recreational UAS interruption
Demo after-action summary records a precautionary pause after a recreational drone appeared near a comparable venue event.
Line: Historical precedents
Relevance: Contextual precedent only; it is not an indicator of current hostile intent.
https://example.org/preventio-demo/uas-precedent

International Climate & Security Summit

Threat picture

Vulnerabilities

Alerts / watch items

Security posture

Disruptive protest at venue perimeter

Lone-actor edged-weapon attack on delegate motorcade

Cyber-enabled doxxing of attending delegates

UAS incursion over venue airspace

Crowd crush at main entrance during arrival peak

Insider compromise via accredited press pool

Coalition announces 'Climate Justice Bloc' action on opening day

Local press: police request reinforcements from cantonal authorities

Hacktivist channel publishes 'corporate enabler' target list

Host authority issues summit access and perimeter advisory

Transit operator forecasts concentrated morning arrivals

Venue note confirms dual-use of the south screening area

Accreditation desk extends late press registration window

Previous summit records short recreational UAS interruption