Security Intelligence

School Security and Safety for Expatriate Families in High-Risk Cities | CloseProtectionHire

Q: "What security questions should parents ask when selecting a school in a P1 city?"

"Before enrolling a child at any school in a high-risk city, parents should ask: What is the school's access control policy (who can enter the campus, what verification is required for visitors, who can collect a child and how is this verified)? Does the school have a documented and tested emergency response plan? What is the communication protocol during a security incident (how will parents be notified, through which channel, how quickly)? What is the collection protocol during a lockdown (where do parents go, who do they contact, what is the handover procedure)? Has the school coordinated with local police or private security on its emergency response? What staff security training has been completed (ACT Awareness or local equivalent)? What is the school's social media policy for students? Schools that cannot answer these questions with specific, documented responses are schools where security has not been adequately considered."

Q: "Why is the school run the highest-risk element of a child's daily routine?"

"The school run -- the daily collection and drop-off of a child at school -- is the most predictable, most regularly repeated movement in a child's (and by extension, a family's) security profile. It occurs at the same location, at approximately the same time, with observable collection participants, on a highly consistent schedule. In kidnap-for-ransom environments (Lagos, Nairobi, Bogota, Mexico City, Manila), this predictability is operationally valuable to anyone conducting surveillance. A professional kidnap operation begins with the collection of exactly this kind of pattern-of-life intelligence. The school run is where route variation matters most, where counter-surveillance awareness is most relevant, and where the collection authorisation protocol (who is authorised to collect, how this is verified) needs to function reliably."

Q: "What is the correct protocol if a school enters lockdown while my child is inside?"

"The instinct during a school lockdown is to drive to the school immediately. This instinct is understandable and almost always counterproductive. School lockdown protocols are designed to keep children inside a secure, known environment under professional supervision. A parent arriving at the school perimeter during an active security incident does several harmful things: they may obstruct emergency service vehicle access, they may expose themselves to the active threat, they may create communication confusion for the school security team, and they may inadvertently communicate the school's location or status on social media. The correct protocol is to stay away from the school, monitor the designated communication channel (the school's parent app, the designated emergency number, not social media), and await instructions from the school or emergency services. The school will communicate a collection point and a verification procedure when it is safe."

Q: "How should a family introduce their security profile to a school in a high-risk city?"

"Families with an elevated security profile -- an executive principal, a family with specific threat history, or a family in a particularly high-risk sector -- should inform the school's security manager or head teacher of the relevant elements of their threat profile before enrolment. This does not require sharing classified threat intelligence. It means communicating: that the family has a security team, who the security team's contact is, who specifically is authorised to collect the child (by name and with a photo), whether there is a code word system the school should use to verify authorised collection, and whether there are any specific concerns or threat indicators the school should be aware of. A school that is not informed cannot plan. A school that is informed can incorporate the family's security arrangements into its own protocols -- restricting access to the child's address details, verifying collection against the authorised list, and communicating with the family's security manager as the first point of contact in an incident."

Q: "What are the specific school security risks in P1 cities compared to lower-risk markets?"

"In P1 cities, the school environment faces threats that are largely absent in UK or European contexts. In Lagos and Nairobi, Bogota and Mexico City: schools serving the international and expatriate community are known to contain the children of wealthy executives and diplomats, making them potential targets for kidnap operations. Vehicle access control at the school perimeter, armed or professional security presence, identity verification for collection, and counter-surveillance of the school run route are standard security measures at well-run international schools in these cities -- not exceptional ones. In Nairobi specifically, al-Shabaab has targeted locations used by foreigners, and international school security is designed accordingly. In contrast, a European or North American international school in Singapore, Tokyo, or Abu Dhabi faces a materially lower threat profile and proportionally different security requirements."

Security guidance for expatriate families selecting and using schools in high-risk cities. Covers school security assessment, the school run as a threat vector, communication protocols during incidents, and city-specific context for P1 markets.

4 May 2026

Written by James Whitfield, Senior Security Consultant

Speak to the Team

Placing a child in school in Lagos, Nairobi, Bogota, or Mexico City is a materially different security decision from school enrolment in London or Singapore. The same principles of child safety apply, but the threat environment – kidnap for ransom, targeted approaches to family members of wealthy executives, and general security incidents involving foreigners – means that the security assessment of the school environment cannot be separated from the general protective security planning for the family.

This guide covers the security dimensions of school selection in high-risk cities, the school run as the highest-risk recurring movement in a child’s routine, communication and collection protocols during a security incident, and city-specific context for the P1 markets where these considerations are most acute.

School selection as a security decision

Most expatriate families selecting a school in a high-risk city prioritise curriculum (IB, British, American), language of instruction, and university preparation record. These are reasonable educational priorities. They should sit alongside a security assessment of the school environment.

The security questions that should be answered before enrolment:

Access control. How does the school manage who enters the campus? Is there a single access point with professional security personnel and ID verification? Is vehicle access controlled? Is there a visitor management system that records who enters and when? Schools with open campuses, informal visitor management, and uncontrolled vehicle access in high-KFR cities are schools with a documented vulnerability.

Emergency response plan. Does the school have a documented emergency response plan that covers lockdown, evacuation, communication with parents, and handover of children? Has this plan been tested in a drill within the last 12 months? Who is responsible for executing it?

Communication protocol. How will parents be notified during a security incident? Which channel (school app, SMS, phone call)? What is the expected notification time? Is there a designated parent contact number that is different from the main reception line?

Staff training. Have school security staff and key front-of-house staff completed ACT Awareness (NaCTSO) or a local equivalent terrorism awareness programme? Is there a Security Manager or security officer on site during school hours?

Collection protocol. Is the collection authorisation list maintained? Is there an identity verification process for unfamiliar collectors? Does the school have a code word system for emergency collection? Is collection managed in a controlled environment (a designated collection zone within the perimeter) or at the public street?

Schools that cannot answer these questions with specific, documented responses have not invested adequately in security planning. In P1 cities, this is a disqualifying factor for families with elevated threat profiles.

The school run: the most predictable exposure

The school run is the recurring movement that security planners in KFR environments treat with the most serious attention. It occurs daily, at approximately the same time, on routes that are inherently semi-fixed (the school location is fixed, the family home is fixed, the road network between them is limited). The same vehicle, the same adults, a child whose presence confirms the family connection.

In professional kidnap operations – documented extensively in Control Risks and Kroll case files – pattern-of-life surveillance typically begins at the most predictable points. The school run is often the first point of operational intelligence collection.

The security disciplines that apply to the school run in a high-risk city:

Route variation. Multiple viable routes between home and school should be identified and used on a varied schedule. Not an identical route each morning. In cities with significant traffic constraints (Lagos, Manila, Mexico City), this requires advance route planning and time margin building.

Counter-surveillance awareness. The driver on the school run should be trained in surveillance detection – the ability to identify vehicles or individuals that are following or observing the route. A vehicle or individual appearing more than once on the route, at different locations, is a surveillance indicator requiring immediate reporting to the family’s security manager.

Collection authorisation. The school’s collection protocol is only as strong as the family’s registration. Every person authorised to collect the child should be on a documented list by name, with a photograph provided to the school. The code word should be established for emergency collection by anyone not on the standard list.

Counter-ambush vehicle protocol. For families with elevated threat profiles, the collection vehicle should not stop at the school gate in a location that provides no exit options. Pulling forward, maintaining engine running, and executing collection without extended exposure time are standard disciplines in high-KFR environments.

City-specific context

Lagos. The international school sector in Lagos serves the children of expatriate executives and wealthy Nigerians. Schools in Ikoyi, Victoria Island, and Lekki typically have professional security teams, vehicle access control, and coordinated security protocols. OSAC Nigeria reports document that the general Lagos security environment – armed robbery, express kidnapping, carjacking – applies to school run routes as to any other movement. Vetted driver and vehicle protocol for the school run is standard practice for most international families.

Nairobi. The Westlands, Lavington, and Karen areas where most international schools are located are lower risk than Nairobi’s higher-crime zones, but al-Shabaab’s demonstrated interest in locations associated with foreigners (Westgate 2013, Dusit 2019) is relevant context. International schools in Nairobi typically have armed security presence at the perimeter, vehicle access management, and emergency response plans that have been updated in the post-Dusit environment.

Bogota and Mexico City. Both cities have significant KFR histories, and both have established international school communities with schools that have invested in security infrastructure accordingly. The school run is the highest-risk movement in both cities. Vetted driver, route variation, and collection protocol are standard elements of the family security programme for any international executive family in either city.

Manila. The BGC and Makati corridors where most international families and schools are located are relatively manageable, but Metro Manila’s general security environment (express kidnapping, vehicle crime) applies to school run routes. Armed security presence at school perimeters is common at higher-tier institutions.

Lockdown protocol: what parents should and should not do

When a school announces a lockdown – whether in response to a security threat, an active incident, or a precautionary measure – the correct parental response is to stay away from the school and monitor the designated communication channel.

The school’s lockdown protocol is designed to keep children in a secured, known location under professional supervision. It typically involves bringing all students inside, securing entrances, communicating with emergency services, and establishing a parent communication and collection point for when the all-clear is given.

A parent who self-deploys to the school gate during a lockdown:

May obstruct emergency service vehicle access
May become exposed to the active threat outside the school’s secured perimeter
Creates communication complexity for the school security team
Is likely to post or share information on social media that communicates the school’s status in real time

The correct actions during a school lockdown: confirm the designated communication channel is active (school app, emergency number), ensure other family members or your security manager is aware of the situation, stay away from the school, and await the school’s collection instructions. The school will communicate a collection point, a verification procedure, and a time when safe collection can occur.

For the broader family security briefing that covers the school run alongside other family security protocols, see our security briefing for family members guide. For the residential security that provides the physical baseline for a family’s home in a high-risk city, see our residential security for executives guide. For families relocating to a P1 city and establishing their security programme from scratch, see our executive relocation security guide. For the distinct security challenges of university and higher education campus environments – adult student populations, open-access research campuses, Martyn’s Law obligations for large events, and Prevent duty counter-terrorism obligations – see our university campus security guide.

For UK boarding schools specifically – residential safeguarding frameworks (ISI/National Minimum Standards for Boarding Schools 2022), exeat collection authorisation protocols, Martyn’s Law obligations at Enhanced tier schools, the specific threat profile of children from HNWI families, and digital security education for students – see our boarding school and student protection guide.

Sources

OSAC: Nigeria Security Report 2024, Kenya Security Report 2024, Colombia Security Report 2024, Philippines Security Report 2024. Control Risks: Family Security and Child Protection in High-Risk Markets 2024. US Embassy School Security Advisories: Lagos, Nairobi, Bogota, Mexico City, 2024. NaCTSO: ACT Awareness Programme and School-Specific Guidance, 2024. ASIS International: Protection of Children – Standards and Guidelines Chapter, 2024. NSPCC: Child Online Safety Guidance, 2024. GISF: Security Risk Management for Organisations Working with Children, 2023.

Summary

Key takeaways

The school run is the most predictable element of a protected family's daily routine

Professional security programmes for executives in KFR-risk environments prioritise route variation, collection protocol, and counter-surveillance for the school run above almost any other recurring movement. The predictability is the risk: the same road, the same time, the same vehicle, with a child whose presence confirms the principal's connection. In high-risk cities, the school run requires the same security discipline as the executive's office commute.

School selection is a security decision, not only an educational one

The security profile of a school -- its access control, its emergency planning, its communication protocols, and its own threat assessment -- should be assessed before enrolment in any P1 city. A school with excellent academic results but no access control, no emergency response plan, and staff who have never completed terrorism awareness training is a security gap in the family's overall protective programme. Most reputable international schools in high-risk cities understand this and have invested accordingly; the assessment is to confirm it rather than assume it.

Do not self-deploy to a school during a lockdown

This is the most common parental error in a school security incident and the one most consistently identified in post-incident reviews. Parents arriving at the school perimeter during an active incident obstruct emergency service access, expose themselves to potential harm, and disrupt the school's communication and management of the event. The designated communication channel, not the school gate, is the correct response. Stay away, monitor the channel, and await collection instructions.

Collection authorisation must be documented and tested before an incident

The person authorised to collect a child should be identified by name, confirmed with a photograph, and registered with the school before the school year starts. The code word system (a word used by the school to verify an authorised collector who is not on the usual list) should be established, known to the child at an age-appropriate level, and tested. A collection protocol that has never been tested is a plan, not a practice.

Children need age-appropriate briefings about the security considerations that apply to them

An eight-year-old does not need to understand their parent's threat profile. They need three rules: do not tell strangers about Mum or Dad's work, only go with people on the collection list, and tell a trusted adult immediately if something makes them uncomfortable. A fourteen-year-old can understand that the family has a specific security profile, what the social media rules are, and what to do if they cannot reach a parent. Age-appropriate preparation produces functional security awareness without creating anxiety.

FAQ

Frequently Asked Questions

Before enrolling a child at any school in a high-risk city, parents should ask: What is the school’s access control policy (who can enter the campus, what verification is required for visitors, who can collect a child and how is this verified)? Does the school have a documented and tested emergency response plan? What is the communication protocol during a security incident (how will parents be notified, through which channel, how quickly)? What is the collection protocol during a lockdown (where do parents go, who do they contact, what is the handover procedure)? Has the school coordinated with local police or private security on its emergency response? What staff security training has been completed (ACT Awareness or local equivalent)? What is the school’s social media policy for students? Schools that cannot answer these questions with specific, documented responses are schools where security has not been adequately considered.

The school run – the daily collection and drop-off of a child at school – is the most predictable, most regularly repeated movement in a child’s (and by extension, a family’s) security profile. It occurs at the same location, at approximately the same time, with observable collection participants, on a highly consistent schedule. In kidnap-for-ransom environments (Lagos, Nairobi, Bogota, Mexico City, Manila), this predictability is operationally valuable to anyone conducting surveillance. A professional kidnap operation begins with the collection of exactly this kind of pattern-of-life intelligence. The school run is where route variation matters most, where counter-surveillance awareness is most relevant, and where the collection authorisation protocol (who is authorised to collect, how this is verified) needs to function reliably.

The instinct during a school lockdown is to drive to the school immediately. This instinct is understandable and almost always counterproductive. School lockdown protocols are designed to keep children inside a secure, known environment under professional supervision. A parent arriving at the school perimeter during an active security incident does several harmful things: they may obstruct emergency service vehicle access, they may expose themselves to the active threat, they may create communication confusion for the school security team, and they may inadvertently communicate the school’s location or status on social media. The correct protocol is to stay away from the school, monitor the designated communication channel (the school’s parent app, the designated emergency number, not social media), and await instructions from the school or emergency services. The school will communicate a collection point and a verification procedure when it is safe.

Families with an elevated security profile – an executive principal, a family with specific threat history, or a family in a particularly high-risk sector – should inform the school’s security manager or head teacher of the relevant elements of their threat profile before enrolment. This does not require sharing classified threat intelligence. It means communicating: that the family has a security team, who the security team’s contact is, who specifically is authorised to collect the child (by name and with a photo), whether there is a code word system the school should use to verify authorised collection, and whether there are any specific concerns or threat indicators the school should be aware of. A school that is not informed cannot plan. A school that is informed can incorporate the family’s security arrangements into its own protocols – restricting access to the child’s address details, verifying collection against the authorised list, and communicating with the family’s security manager as the first point of contact in an incident.

In P1 cities, the school environment faces threats that are largely absent in UK or European contexts. In Lagos and Nairobi, Bogota and Mexico City: schools serving the international and expatriate community are known to contain the children of wealthy executives and diplomats, making them potential targets for kidnap operations. Vehicle access control at the school perimeter, armed or professional security presence, identity verification for collection, and counter-surveillance of the school run route are standard security measures at well-run international schools in these cities – not exceptional ones. In Nairobi specifically, al-Shabaab has targeted locations used by foreigners, and international school security is designed accordingly. In contrast, a European or North American international school in Singapore, Tokyo, or Abu Dhabi faces a materially lower threat profile and proportionally different security requirements.

Get in Touch

Request a Consultation

Describe your security requirements below. All enquiries are confidential and handled by licensed consultants.