HEAT Training for Corporate Travellers

Hostile Environment Awareness Training (HEAT) is one of the most consistently undersold components of a corporate travel security programme. Most organisations that deploy employees to high-risk regions focus on pre-travel risk assessments, close protection sourcing, and insurance arrangements. Fewer invest in giving the traveller themselves a working understanding of how to behave, what to look for, and how to survive if something goes wrong. HEAT addresses that gap.

This is not a niche topic for journalists and aid workers. It is relevant to any corporate traveller whose itinerary includes destinations where the FCDO, US State Department, or comparable national advisory body rates the risk above the standard business travel baseline.

What HEAT Training Covers

A full HEAT course typically runs three to five days and is structured around practical scenarios rather than classroom-only instruction. Core modules in a well-designed programme include the following.

IED awareness and vehicle search. Participants learn to recognise indicators of improvised explosive devices in vehicles, along buildings, and on approach routes. Vehicle search procedures – conducted systematically, not as a token gesture – are practised until they are procedural habit rather than conscious effort. This is not about training amateur bomb disposal operators; it is about threat recognition and decision-making.

Trauma first aid. Specifically aimed at treating injuries likely in a hostile environment: gunshot wounds, blast injuries, arterial bleeding. Control of catastrophic haemorrhage using tourniquets and wound packing takes priority over standard first-aid protocols designed for peacetime medical emergencies. The Tactical Combat Casualty Care (TCCC) principles underpin most credible HEAT trauma modules.

Convoy and vehicle procedures. How to behave as a passenger in a high-risk vehicle movement: seat positioning, door discipline, emergency exit drills, what to do if the vehicle is ambushed, how to communicate with the driver under stress. This module is relevant even for executives who will have a security driver, because the protected person’s behaviour in a vehicle incident materially affects the outcome.

Checkpoint behaviour. How to interact with military, police, and irregular checkpoint operators. Documentation management, communication protocols, what constitutes a compliant and non-threatening posture, and when to comply unconditionally versus when a checkpoint may itself be a hostile act. This is contextual and requires country-specific knowledge from the instructor.

Kidnap survival and initial captivity. Not a guarantee of escape – no responsible provider offers that. Instead: behaviour during abduction (compliance, non-provocation, information retention), physical and mental resilience techniques for initial captivity, how to communicate with captors, and what the professional response from a trained K&R consultant involves. Participants who have attended this module make better decisions in the first 72 hours of captivity than those who have not.

Communications protocols. Check-in procedures, coded communication systems, dead-letter drop methodology, emergency communication under observation, satellite phone operation, and how to signal duress to a base contact.

Sources: Control Risks HEFAT course framework documentation; UN DSS SSAFE training standards; Rory Peck Trust training programme specification 2024.

HEAT Versus HEFAT: Understanding the Distinction

HEFAT (Hostile Environment and First Aid Training) is the variant most commonly associated with media organisations and individual journalists. The Rory Peck Trust, which serves freelance journalists, has extensively documented the HEFAT standard and made it the benchmark for media-sector hostile environment preparation.

The content overlap between HEAT and HEFAT is substantial. The distinction lies in scenario framing: HEFAT training contexts address the specific situations journalists encounter – covering conflict from an unembedded position, working with fixers, operating in environments where press status offers neither protection nor sympathy. Corporate HEAT training is framed around the executive or NGO worker’s operating context instead.

For a corporate security policy, specifying HEFAT by name is unnecessarily narrow. HEAT covers the same core competencies and is better suited to framing within a corporate programme.

When to Require HEAT: Building It Into Policy

The most common failure in corporate HEAT deployment is not the quality of the training. It is the absence of a clear policy requirement that makes training mandatory rather than voluntary. An employee who travels occasionally to a high-risk destination may understand that HEAT would be useful. Without a policy mandate, the training is deferred indefinitely.

A well-structured corporate travel security policy, aligned to ISO 31030:2021 Travel Risk Management, identifies risk tiers for destinations. The policy should specify that employees travelling to destinations at or above a defined risk threshold must hold a current HEAT certificate before the trip is approved. The threshold should be defined by reference to an objective source – FCDO Level 3 or above is a workable benchmark.

Currency matters. HEAT training from five years ago is of limited value for an employee about to travel to a destination with a materially changed threat picture. A sensible renewal cycle is every two to three years for employees with regular high-risk travel, or before any trip to a destination significantly more dangerous than previous deployments.

Sources: ISO 31030:2021 Travel Risk Management standard; FCDO travel advisory grading framework; OSAC 2024 training resources guidance.

Selecting a HEAT Provider

The HEAT training market is variable in quality. Providers with verifiable military or specialist security instructor backgrounds, country-specific current knowledge, and realistic scenario training deliver materially better outcomes than those offering predominantly classroom-based sessions.

Key selection criteria:

Instructor credentials. Not just a military background – current operational knowledge of the destination environment. An instructor whose field experience ended in 2010 cannot deliver useful current-context training for, say, the Sahel or parts of South Asia. Ask specifically about recent in-country deployment.

Scenario realism. Good HEAT training uses live scenarios: vehicle ambush drills, mock checkpoint interactions, simulated captivity exercises. These create stress inoculation that pure classroom instruction cannot replicate.

Accreditation. In the UK, look for providers whose first aid components meet HSE-accredited standards. For the trauma-specific modules, TCCC accreditation is the relevant benchmark. Providers affiliated with the Security Industry Authority (SIA) training framework offer an additional quality signal.

Tailoring. A provider who delivers the same course regardless of the destination is not delivering threat-specific training. Good providers tailor scenario content, checkpoint culture modules, and IED profiles to the specific region.

Control Risks, International SOS (which absorbed red24), Kroll, and a range of UK-based specialist providers all offer credible HEAT programmes at different price points. Reference checks through your organisation’s security network are the most reliable selection mechanism.

HEAT and Close Protection: The Relationship

HEAT training does not replace close protection, and close protection does not make HEAT training unnecessary. The two work in different registers.

A close protection team manages the principal’s external environment. They control access, survey routes, manage ground transport, and provide an immediate physical response capability. HEAT training equips the principal to function intelligently within that security architecture and to survive without it if it fails or is absent.

An executive who understands vehicle drill, checkpoint protocol, and basic first aid is a better asset to a CP team under pressure than one who is completely passive and dependent. The CP operator’s job becomes harder, not easier, when the principal has no situational awareness.

For corporate travellers who do not have close protection – the majority, even in elevated-risk destinations – HEAT training is not a luxury. It is the primary risk mitigation tool available.

For the duty of care framework that should govern who receives HEAT training and when, see our corporate travel security policy guide. For the specific security profile of journalists and NGO workers, see our security for journalists guide and our NGO humanitarian worker security guide. For principals operating in environments where HEAT training is the precursor to close protection deployment, see our executive protection services. For the kidnap-specific behavioural and psychological preparation that complements HEAT training for KFR-risk environments, see our anti-kidnapping training guide. For the document handling, vehicle protocol, and corridor-specific risk assessment that HEAT checkpoint modules prepare travellers for, see our border crossing and checkpoint security guide.