SF
PERSPECTIVES · July 20, 2026

The Five Questions That Define Real Exposure

A personal risk profile is not a feeling. It is five specific, answerable questions most executives have never actually asked themselves.

Steve Frassetti
Steve Frassetti
stevefrassetti.com
The Five Questions That Define Real Exposure

The Assessment Nobody Runs

Most executives who think about their personal risk think about it as a feeling. A sense that travel carries some exposure. A vague awareness that a public profile means something. A general instinct that family changes the calculation. None of this is wrong. None of it is specific enough to act on.

The executive who has reached this point already knows how to turn a vague concern into a specific answer. He does it professionally, constantly: a market feels risky, so he sizes the exposure. A deal feels uncertain, so he runs the diligence. A hire feels wrong, so he checks the references. The same discipline applied to his own physical and personal exposure produces five concrete, answerable questions. Almost no one has actually sat down and answered them.

Five questions define an executive’s actual exposure: how predictable is his schedule and location, what does his digital footprint actually reveal, who travels with him and what do they need that he does not, what does his specific geography expose, and has the capability question been resolved independent of whether he carries. Answered honestly, in order, these five produce a specific inventory of gaps, not a general sense that risk exists somewhere.

Question One: How Predictable Is His Schedule and Location

Predictability is the raw material every other form of exposure is built from. A schedule that is knowable in advance, a routine that repeats on visible days, a public calendar of appearances or speaking engagements: none of these are dangerous by themselves, but they are the input a targeted approach requires. An opportunistic threat needs proximity. A targeted one needs a pattern.

The honest version of this question is not whether the executive is famous. It is narrower: how many people outside his household could correctly guess where he will be at a given time next week, and how they would have gotten that information. For most executives, the answer is longer than expected: a company website with a public calendar, an assistant who confirms meeting locations by email, a recurring flight on a predictable route, a standing table at a restaurant near the office. None of this requires a public profile. It only requires a pattern, and most executives have never audited their own for one.

A useful version of this audit takes fifteen minutes: list every recurring commitment on next week’s calendar, from the standing Tuesday flight to the same restaurant table, then ask which of them a stranger could reconstruct from public information alone. Most executives are surprised by the length of the list, not because any single item is dangerous, but because the pattern they form together is exactly the kind of predictability an opportunistic or targeted approach depends on. The fix is rarely eliminating the pattern. It is knowing it exists and deciding, deliberately, which parts of it are worth varying.

Question Two: What Does the Digital Footprint Actually Say

A LinkedIn profile lists an employer, a title, and a professional network. A company website adds a headshot and sometimes a direct office address. A news search adds press coverage and public statements. A personal social media account, if it exists, adds family, neighborhood, and travel, often in real time. None of this requires a special skill to assemble. It requires a search engine and the willingness to spend fifteen minutes looking.

Most executives have never run this search on themselves. Fewer have run it the way an outside party actually would: methodically, across every platform, cross-referencing what a company bio reveals against what a personal account confirms, noting which pieces of information corroborate each other and which one alone would be harmless. The honest audit is uncomfortable precisely because it is not hypothetical. It is a direct answer to the question of what is already available to anyone who looks, compiled in less time than a single meeting takes.

Question Three: Who Travels With Him, and What Do They Need That He Does Not

Personal protection is one skill. Protecting the people who travel alongside an executive requires something additional: awareness that extends beyond himself, and a plan that accounts for someone who may have no training at all. A spouse in an unfamiliar city. Children at a public event. A colleague on a trip where the itinerary is more exposed than either has considered.

The executive who has built real capability for himself has often not asked the second question: what the plan looks like when it is not just him. Protecting the people who travel with him is a different problem than protecting himself, and it does not get solved by extension. It gets solved by being asked directly, which most executives have not done.

Consider the version of this that plays out on a single family trip: a spouse checking into a hotel alone while the executive finishes a call in the lobby, children at a resort pool with no adult who has been briefed on the property’s exits, an assistant flying ahead to confirm a venue with no plan for what she does if something feels wrong before the principal arrives. None of these people asked to be part of a threat assessment. All of them are, whether or not anyone has told them so. The plan that only accounts for the executive is not a plan. It is half of one.

Question Four: What Does the Specific Geography Actually Expose

A risk profile built for a generic American city is not built for the one an executive actually lives and works in. Houston’s threat environment is specific and structural: a violent crime rate more than twice the national average, a widespread geography of business travel that moves through corridors most executives have never mapped as risk corridors at all. The same is true, with different specifics, of any major metro. The question is not whether a given city is dangerous in the abstract. It is whether the executive has ever looked at his actual commute, his actual neighborhood, and his actual travel corridors with the same rigor he would apply to a market he was entering for the first time. Almost none have. The city they operate in every day is the one piece of context they have stopped seeing as information at all.

Question Five: Has the Capability Question Been Resolved, Independent of Whether He Carries

A firearm answers a narrow set of scenarios. It does not answer the question of whether the underlying capability exists when the tool is not present, not legal to carry, or not the right response to the situation at hand. Whether or not an executive carries, the capability question is separate, and it is the one most consistently skipped, because the presence of a tool feels like an answer even when it is not one.

The honest version of this question does not ask whether an executive carries. It asks whether he has ever tested, under any real condition, whether his physical response holds when adrenaline is real and the other person is not cooperating. Most executives have not, regardless of what is or is not in a holster, and the presence of a firearm has a way of quietly ending the conversation before that question gets asked at all.

Why Five, and Why in This Order

The five questions are not an arbitrary checklist. Each one closes a specific gap the others leave open. Predictability without a digital footprint audit misses how the pattern actually gets discovered. A digital audit without accounting for the people who travel alongside an executive misses the exposure that is not his own. Geography without the capability question produces an accurate map of the risk and no answer for what to do inside it. The order matters because each answer changes what the next one means: a highly predictable schedule in a low-crime environment is a different problem than the same schedule in Houston, and neither is the same problem as an unresolved capability gap layered on top of both.

An executive who answers all five honestly does not walk away with a diagnosis. He walks away with an inventory: specific gaps, in specific order of consequence, none of them abstract. That inventory is the actual starting point for a Context assessment, not a general sense that risk exists somewhere.

What the Five Questions Actually Produce

None of these five questions requires a tool to answer. They require the same rigor an executive already applies to every other domain that matters: a direct, honest, specific accounting of where the exposure actually is, not where it feels like it might be. Most executives who run this exercise honestly find the answer uncomfortable in a useful way. The gaps are specific. They are also addressable.

This is what the Context dimension of this system exists to do: calibrate everything else, awareness, avoidance, physical readiness, and capability, to the specific answers to these five questions, rather than to a generic profile that fits no one exactly. Executives who want to run this assessment with someone who has built the framework for exactly this purpose can start with a Discovery Call.

ABOUT THE AUTHOR

Steve Frassetti is a first-degree Gracie Barra black belt with twenty years of training across Brazilian Jiu-Jitsu, Judo, and Mixed Martial Arts. He is a longtime technology executive who trains executives, senior leaders, and high-level professionals in private settings. Texas-based, with national engagements by arrangement. Every engagement begins with a free 30-minute Discovery Call.

Steve Frassetti