A Decade of Intelligence:
What Ten Years of B4 Secure Has Taught Us About Organisational Resilience
When B4 Secure was founded in 2016, the world was already changing but few could have predicted quite how fast, how connected, and how unforgiving the next decade would become.
Ten years ago, many organisations still viewed security, intelligence and resilience as separate disciplines. Security protected assets. Intelligence informed decisions. Resilience sat somewhere in the business continuity plan, often reviewed annually and tested occasionally. Risk registers were important, but frequently static. Threat assessments were commissioned around a specific event, location, person, journey or concern. Cyber was often treated as a technical problem. Supply chains were largely assessed through cost, efficiency and delivery.
Then the world reminded us that risk does not respect organisational charts and dashboards.
Over the last decade, leaders have had to navigate Brexit, regulatory transformation, terrorist attacks, cyber escalation, geopolitical instability, COVID-19, war in Ukraine, sanctions, supply-chain disruption, energy insecurity, economic volatility, protest activity, disinformation, deepfakes, AI-enabled threats and a growing expectation that organisations must not only respond to harm, but anticipate it.
The lesson is clear: resilience is no longer about whether an organisation can recover from disruption. It is about whether it can understand the environment early enough to make better decisions before disruption becomes crisis.
That is where intelligence matters.
From information to intelligence
One of the most significant shifts over the last ten years has been the sheer volume of information available to organisations. Leaders are not short of news, alerts, dashboards, notifications, data feeds or reports. In many cases, they are overwhelmed by them.
But information is not intelligence.
Information tells us something has happened. Alerts tell us something has changed. Intelligence tells us why it matters, who it affects, what may happen next and what decisions should follow.
That distinction has shaped B4 Secure’s work from the beginning.
Our focus has never been simply to collect information. It has been to interpret it. To assess it. To challenge it. To ask the question that sits at the heart of good intelligence practice: so what?
So what for the organisation?
So what for the board?
So what for employees, operations, reputation, supply chains, clients, assets, events, travel, executives or vulnerable individuals?
So what needs to happen now?
The last decade has shown that the organisations best able to withstand disruption are not always those with the largest budgets or the most complex systems. They are often the ones with the clearest view of the threat environment and the confidence to act early.
The decade that changed organisational risk
The period from 2016 to 2026 has been a decade of compounding risk.
Brexit changed the political, regulatory and trading environment for UK organisations and their international partners. Between the referendum in 2016 and exit in 2020, it forced businesses to think differently about borders, supply chains, labour, legal frameworks, customs, contracts and operational dependencies.
The terrorist attack at Manchester Arena in 2017, and the Inquiry that followed, also changed the national conversation around protective security. One of the enduring lessons was not simply that organisations need security plans. It was that they need credible, current and event-specific assessments of threat, vulnerability and mitigation. Generic risk assessments, assumptions, box-ticking and passive awareness are not enough when the threat environment is dynamic.
The Manchester Arena Inquiry highlighted the importance of risk assessment, hostile reconnaissance awareness, security perimeters, CCTV, patrols, communication and clear responsibility.
For those of us working in intelligence and protective security, the lesson was stark: assessment is not paperwork. It is a discipline. It is the process through which threat becomes understood, vulnerability becomes visible and action becomes possible.
The arrival of GDPR and the Data Protection Act 2018 changed how organisations thought about personal data, privacy, accountability and digital responsibility. Data was no longer simply an asset; it became a regulated responsibility. For intelligence and investigative work, this reinforced the importance of lawful, ethical and proportionate collection, assessment and reporting.
The COVID-19 pandemic then transformed resilience from a boardroom concept into a lived operational reality. Almost overnight, organisations had to understand exposure, workforce safety, continuity, supply-chain fragility, online working, fraud risk, misinformation, travel restrictions and fast-changing public policy. It exposed a difficult truth: many organisations had plans, but not all had resilience.
The blockage of the Suez Canal in 2021 gave the world a visible lesson in supply-chain dependency. One vessel, one waterway, and global trade felt the impact. It was a reminder that resilience is not only about what happens inside an organisation. It is also about the invisible networks on which that organisation depends.
Russia’s full-scale invasion of Ukraine in 2022 changed the European security landscape and brought geopolitics back into the centre of corporate risk. Sanctions, energy markets, food security, cyber activity, protest, disinformation, physical security and reputational exposure all became board-level concerns. For many organisations, geopolitics stopped being something discussed by foreign policy specialists and became something that affected procurement, investment, operations and people.
From 2023 onwards, the Israel-Gaza conflict and Houthi attacks in the Red Sea reinforced the vulnerability of maritime trade and critical routes. Shipping diversions, insurance costs, delays and uncertainty created further pressure on global supply chains. For businesses, the lesson was not simply that supply chains can be disrupted. It was that regional conflict, maritime security, political intent and commercial exposure can become operational problems very quickly.
By 2026, the Iran, US and Israel crisis, and the severe disruption around the Strait of Hormuz, provided another powerful reminder of chokepoint risk. A strategic waterway thousands of miles away can influence energy prices, shipping routes, insurance, manufacturing, logistics, inflationary pressure and board-level decision-making. This is why geopolitical intelligence can no longer be treated as background context. It is increasingly central to organisational resilience.
At the same time, cyber risk matured from an IT issue into an organisational resilience issue. Ransomware, supply-chain compromise, credential theft, hostile state activity and attacks on critical infrastructure demonstrated that digital incidents can rapidly become operational, financial, legal and reputational crises.
Now, AI is accelerating both opportunity and threat. It can help organisations identify patterns, monitor change and improve decision-making. It can also enable fraud, impersonation, synthetic media, disinformation, cyber intrusion and reputational harm at scale. The challenge for the next decade will not be whether organisations use AI. They will. The challenge will be whether they use it with sufficient governance, validation and human judgement.
Regulation has followed the risk.
The regulatory environment has evolved because the threat environment has evolved.
Across the last decade, the direction of travel has been clear: organisations are expected to understand their risks, evidence their decisions, protect personal data, manage cyber exposure, examine supply-chain dependencies, prevent fraud, prepare for terrorism-related risk where relevant, and demonstrate that resilience is not merely aspirational but operational.
Martyn’s Law is an important example of this shift. Emerging from the lessons of the Manchester Arena attack and the campaign led by Figen Murray in memory of her son Martyn Hett, it places greater emphasis on preparedness, protective security and the responsibility of organisations to consider how they would respond to a terrorist attack.
But its wider significance goes beyond compliance. It reflects a broader truth about modern resilience: organisations must understand the threat environment they operate within. They must assess vulnerability, identify proportionate mitigations, train people properly, test assumptions and ensure security arrangements are not static documents sitting in a folder.
This matters because regulation is no longer just about compliance. It is increasingly about accountability.
Boards and senior leaders are expected to ask better questions. What are we exposed to? How do we know? What intelligence supports that view? What assumptions are we making? What suppliers, people, systems, locations or events create critical dependencies? What would happen if one failed? What early indicators would tell us the risk is changing? What assessments have we undertaken, and are they still valid?
The organisations that answer those questions well are not just protecting themselves against enforcement or reputational damage. They are building strategic advantage.
Because the purpose of intelligence-led assessment is not to frighten organisations into action. It is to help them make better, calmer and more defensible decisions before pressure arrives.
How B4 Secure has evolved
B4 Secure’s own evolution reflects this wider shift.
We began with a clear belief: high-quality intelligence helps organisations make better decisions. Over time, the way we deliver that intelligence has evolved because our clients’ world has evolved.
Our work has grown across intelligence-led risk consultancy, strategic threat assessment, OSINT, digital exposure, enhanced due diligence, online threat monitoring,
cyber and dark web intelligence, geopolitical and supply-chain risk, executive and individual protection, and organisational resilience support.
The common thread has remained the same: helping clients understand what matters, why it matters and what to do next.
In the earlier years, much of the work was bespoke and project-led. Organisations needed support around specific concerns: a threat, an individual, a location, an event, a reputational issue, a due diligence question or a developing security problem.
As the threat landscape became more persistent and interconnected, the requirement changed. Clients increasingly needed continuous awareness. They needed to know not only what had happened, but what was changing. They needed horizon scanning, monitoring, assessment and practical recommendations. They needed intelligence that could support risk registers, board briefings, operational planning and strategic decision-making.
That evolution led naturally to services such as S.C.O.P.E — Strategic Continuous Open-Source Protection & Evaluation — designed to provide assessed intelligence across key risk themes, including supply chain, fraud, technology and cyber, and emerging threats and opportunities.
It also led to HALO, our personal online protection and wellbeing service, created in recognition that organisational risk does not stop at the corporate boundary. Senior leaders, visible women, public figures, executives, sports professionals and high-profile individuals can become targets in ways that affect both personal safety and organisational reputation.
More recently, the creation of AI Synthesis reflects the next stage of that journey: bringing together human intelligence expertise, OSINT methodology and emerging AI capability to support more dynamic, decision-ready situational awareness.
But technology is only part of the answer.
The real value lies in the fusion of automation, analysis and judgement. AI can help us process scale. Analysts help us understand meaning. Leaders need both.
The human factor remains central
For all the change of the last decade, one thing has remained constant: risk is human.
Technology may change the method, speed and scale of harm, but human intent still sits behind many of the threats organisations face. Criminals exploit weakness. Hostile actors exploit uncertainty. Fraudsters exploit trust. Extremists exploit visibility.
Disinformation exploits emotion. Protest movements exploit moments. Insider risk exploits access. Poor decision-making exploits ambiguity.
That is why intelligence must remain grounded in context.
A dashboard can show change. An analyst can ask whether the change matters.
An alert can identify a signal. An intelligence assessment can explain whether it is noise, escalation or early warning.
A report can describe a threat. A good intelligence function helps leaders decide what to do about it.
This is also why threat assessments must never become generic. The same threat can mean different things depending on the organisation, location, event, leadership profile, sector, supply chain, public visibility and timing. Intelligence-led assessment is about relevance. It asks not only “what is happening?” but “what does this mean for us, here, now, and next?
What the next decade will demand from leaders
The next decade of intelligence and resilience will require leaders to think differently.
First, risk registers must become more dynamic. A risk register that is updated quarterly or annually will not keep pace with a threat environment that changes daily. Organisations need live intelligence feeding into risk understanding.
Second, boards must become more comfortable with uncertainty. Intelligence rarely provides perfect certainty. Its value lies in helping leaders make better decisions with incomplete information.
Third, resilience must move beyond recovery. Recovery remains vital, but the future belongs to organisations that can anticipate, adapt and act early.
Fourth, cyber, physical, geopolitical, reputational and personal risks must be viewed together. The separation between them is increasingly artificial. A cyber incident can become a reputational crisis. A geopolitical event can become a supply-chain disruption. A personal attack on an executive can become an organisational issue. A protest movement can become a security, brand and operational challenge.
Fifth, organisations must not confuse more data with better insight. The future will not reward those who simply collect the most information. It will reward those who can interpret it with discipline, ethics and judgement.
Ten years on
For B4 Secure, the last decade has been a decade of learning, adapting and building.
We have seen the world of intelligence move from the margins of organisational decision-making to the centre of resilience. We have seen clients face risks that were once considered unlikely, distant or theoretical. We have seen the cost of delayed understanding. We have also seen the value of early warning, calm assessment and practical advice.
Above all, we have seen that intelligence is not about predicting the future with certainty. It is about improving the quality of decisions before, during and after disruption.
That is what organisational resilience now requires.
As B4 Secure looks ahead to the next decade, our mission remains rooted in the same principle on which the business was built: to provide intelligence that is clear, ethical, assessed and useful.
Because in a world of constant noise, leaders do not simply need more information.
They need to know what matters.
They need to understand why it matters.
And they need the confidence to act.