Talos
TALOS SERVICES GROUP
Global Reach · Intelligence · Response
07 / Insights — Editorial & Field Dispatches

Field notes. Framed. Distributed with discipline.

Insights is the editorial arm of Talos Services Group — a measured stream of analyst briefings, field dispatches, and protective tradecraft notes drawn from live engagements. Our publication cadence is deliberately slow. We publish when the signal is real. Nothing compromising, nothing sensational, nothing written to chase a headline.

Operating Since
Q1 2024
Editorial Program
Published to Date
74 Pieces
Briefings · Dispatches · Notes
Recurring Series
4 Active
Weekly · Monthly · Quarterly
Subscribers
2,340+
Principals · Programs · Counsel
01 / Featured — The Monthly Read

What the next phase of principal protection looks like.

Our long-form monthly piece. Written for board members, counsel, and chiefs of staff who need to understand the discipline without becoming practitioners of it themselves.

Monthly Brief · 04.2026

The shape of a modern program: from event-driven security to always-on posture.

For two decades, executive protection was organized around calendar events — the annual shareholder meeting, the overseas delegation, the family vacation. That framing no longer holds. The threat environment is continuous. Adversarial attention is algorithmic. A principal with a digital footprint is always a principal under observation. This piece lays out how mature programs are migrating from episodic coverage to a continuous, intelligence-informed posture — and what the transition costs, organizationally and operationally.

Author · David Ramirez
Category · Strategy
Read · 14 minutes
Classification · Public
Read the full brief
TSG-INSIGHT-26-04 MONTHLY · 04.2026 CLASS · PUBLIC AUTH · DR COVERAGE INTENSITY '18 '26 ALWAYS-ON EPISODIC
02 / Recent — Analyst Briefings

Briefings, deliberately short.

Mid-length pieces from our analysts. Tight scope, specific framing, no filler. Published when the material warrants.

001
Protective Intelligence

When the online threat model outpaces the physical one.

Doxxing campaigns, coordinated harassment, and automated OSINT tooling have collapsed the distance between a digital grievance and a physical appearance at a private residence. What modern residential programs are doing about it.

12 Apr 2026 9 min read
002
Travel Security

What a Tier-2 city means operationally — and why the categorization matters.

Delegation travel rarely breaks at the country level. It breaks at the city, the district, the hotel corridor. A working taxonomy for classifying urban environments and why a country-level risk feed alone isn't enough.

05 Apr 2026 7 min read
003
Technology

LLMs in protective operations: what they should do, and what they should never be asked to.

A practical framework for where machine reasoning earns its keep in a security operations center, and where the failure modes are dangerous enough that the model simply should not be the one making the call.

28 Mar 2026 11 min read
004
Regulatory

OFAC enforcement patterns Q1 2026 — what changed, what didn't.

A compressed read of the first-quarter OFAC actions relevant to U.S. corporates operating in Central Asia, the Gulf, and Latin America. Focus on what's predictive, not what's headline-grabbing.

22 Mar 2026 6 min read
005
Program Design

The myth of the solo principal agent — and what it costs when the program believes it.

Hiring one highly-credentialed operator is not a security program. The ways that single-point dependency fails — and a concrete alternative structure that's within budget for most private clients.

14 Mar 2026 8 min read
006
Crisis Response

What "14 hours" actually looks like — reconstructing a rapid family extraction.

A sanitized walkthrough of a MENA-region family extraction from trigger event to wheels-up: decision points, coordinating channels, ground asset allocation, and the moments where the plan had to adapt.

07 Mar 2026 13 min read
03 / Stream — Short-Form Dispatches

Short, timely, often quiet.

Dispatches are shorter than a briefing and more focused than a newsletter — a single observation, anchored to a source, with our team's read. Delivered to subscribers on a rolling basis.

Dispatch Feed · Rolling · Subscriber-first Feed sync · 17:30 ET
20 Apr 2026
TRAVEL
Andean region — regional carrier reliability deteriorating through the southern travel corridor.Three Tier-2 carriers serving La Paz, Sucre, and Cochabamba showing cascading maintenance pull-downs. Delegation itineraries should pivot to primary international carriers where feasible.
4 min
17 Apr 2026
REGULATORY
Gulf state — new outbound capital controls tightening with minimal advance signaling.Client treasury teams with Gulf-denominated exposure should revisit short-horizon repatriation assumptions. Our counsel is reviewing the implementing regulation.
3 min
14 Apr 2026
PROTECTIVE INTEL
Coordinated doxxing activity targeting two biopharma executive leadership teams.Pattern is consistent with prior campaigns run through open-source OSINT aggregators. Residential postures for named principals have been reviewed; advisory issued to adjacent clients.
5 min
09 Apr 2026
CYBER
Ransomware family re-emerging against North American logistics and cold-chain operators.Not a new TTP — a returning one. Posture recommendations for clients in the sector have been re-issued. No direct exposure identified across the TSG portfolio.
4 min
02 Apr 2026
PROGRAM NOTE
Residential assessment intake queue now operating on a 72-hour turnaround for retained clients.Three additional senior assessors joined the intake team this quarter. Engagement process has been shortened; retained clients should see the change reflected in the next intake cycle.
2 min
28 Mar 2026
SUPPLY CHAIN
Red Sea routing — insurance premia on affected lanes holding elevated, not declining.Clients with contract logistics on the Suez–Bab-el-Mandeb corridor should assume the premium environment persists through Q3 absent a step-change in the security picture. No advisory to divert at this time.
6 min
21 Mar 2026
RESEARCH
A reading list: five public reports worth the Sunday afternoon this quarter.World Bank, IMF, ACLED, and two academic centers. Short annotations from our analysts on why each belongs on the desk.
3 min
04 / Series — Recurring Publications

Six series, each with a clear job.

We've resisted the urge to publish everything everywhere. Six series, each with a specific audience and cadence, each owned by a named analyst.

Series 01 WEEKLY

The Brief

Our Monday morning compressed read of the weekend and what it means for the week. Three to five items. No more. Written for principals and chiefs of staff who need the picture in four minutes.

Mondays · 07:00 ET52 / year →
Series 02 MONTHLY

Long Read

The strategic piece. One topic, treated properly, with the space it deserves. Programs, framing, the shape of the discipline. Authored by the leadership team, not the analyst bench.

First Tuesday · Monthly12 / year →
Series 03 QUARTERLY

Posture Review

Our quarterly read of the global risk picture, by region and by discipline. Where the trend lines are moving, where they're not, and what we'd change in a residential or program posture as a result.

Q1 · Q2 · Q3 · Q44 / year →
Series 04 EVENT-DRIVEN

Field Note

Published only when the material warrants it — a coordinated doxxing campaign, an emerging regulatory action, a specific field observation. No cadence. Written by the analyst closest to the material.

As warranted~20 / year →
Series 05 INTERNAL

Red File

Client-confidential. Retained clients receive a quarterly posture-specific supplement — program-level metrics, adjusted threat picture, carry-forward recommendations. Not public and not indexed.

Retained clients only4 / year →
Series 06 ARCHIVAL

The Log

Our rolling, sanitized record of notable engagements and what we learned — the Mission Record, long-form. A reference document for counsel and program leaders evaluating how we approach the work.

RollingOpen archive →
05 / Cadence — Publication Schedule

The calendar, in one page.

Everything we publish, when, and who it reaches. The schedule is deliberately conservative. We'd rather under-publish than add noise to a subscriber's inbox.

Weekly

The Brief — Mondays

Five-minute read. Compressed weekend-to-week picture for principals, chiefs of staff, and counsel.

Delivery · Email · 07:00 ET
Monthly

Long Read — First Tuesday

Strategic long-form, typically 10–15 minutes of focused reading. Topic chosen by the editorial leadership, never by the content calendar.

Delivery · Email & site
Quarterly

Posture Review

A structured, tiered read of the regional and discipline-level risk environment. Released on the first Thursday of each quarter.

Delivery · PDF & site
Event-driven

Field Note

No schedule. Released when the observation is specific, actionable, or clarifying — not when the calendar says.

Delivery · Subscriber feed
Confidential

Red File — Retained

Retained-client quarterly with program-specific posture, metrics, and recommendations. Not public. Not indexed. Distributed via secure channel only.

Delivery · Secure · Retained
Rolling

The Log — Archival

Sanitized record of notable engagements and what we learned. A reference document for counsel and program leaders. Not a recurring publication; open archive.

Delivery · Site · Open archive
Subscribe

The Brief, in your inbox on Monday. Nothing else, unless it matters.

A single email a week. A short dispatch if the material warrants it. We do not sell the list. We do not forward it. We publish when we have something to say — and rest the wire otherwise.

Weekly · Optional dispatch feed · Unsubscribe in one click
06 / Contributors — Who writes what

Named analysts. Accountable bylines.

Every piece carries a named byline. No house-style ghost-writing, no uncredited syndication. When an analyst's name is on it, they stand behind it.

DR

David Ramirez

Managing Director · Editor-in-Chief

Authors the monthly Long Read and the quarterly Posture Review leadership section. Two decades in principal protection programs across North America and the Gulf.

JN

J. Nakamura

Director, Risk Intelligence

Owns the quarterly Posture Review and the regulatory dispatch stream. Former regional analyst with focus on APAC and Gulf financial-services risk.

JF

J. Fontaine

Director, Protective Operations

Authors the weekly Brief and field-note series. Career in residential and delegation protection across Latin America, West Africa, and MENA.

Want the work, without the wait?

The Brief arrives Monday mornings. The dispatch feed fills in the gaps. If you'd rather skip the content and start a conversation about a specific program, we're a direct line away.

Request Support View Mission Record