What happens when pressure tests the system?

A security system may appear effective when operations are normal. Cameras are functioning, guards are at their posts, reports are being submitted and managers are following established routines.

The real test begins when information is incomplete, events are moving quickly and the consequences of a poor decision are significant. Can the organisation distinguish a genuine threat from background noise? Can the right people communicate clearly? Does someone have authority to act? Can critical operations continue while the incident is being managed?

These questions defined an important part of the final day of Global Security Exchange 2026 in Atlanta. The programme brought together a Game Changer session on the changing nature of targeted violence and a closing keynote from retired US Army Staff Sergeant Travis Mills on resilience after life-changing adversity.

Viewed through a Nigerian security lens, the two subjects are closely connected. Threat assessment helps an organisation understand what may be developing. Resilience determines whether its people can remain effective when that threat becomes disruptive.

Threats no longer fit neatly into categories

The Game Changer session, On a Knife’s Edge: How Today’s Targeted Violence Changes Threat Assessments, addressed an increasingly complex challenge for security professionals: individuals of concern may be influenced by overlapping personal, workplace, political, ideological or conspiratorial grievances.

This makes simple labels less useful. A person’s behaviour, circumstances, intent and movement towards violence may provide more meaningful information than the category into which an organisation attempts to place them.

Dr Karie Gibson, a former unit chief in the FBI’s Behavioral Analysis Unit-1 and Behavioral Threat Assessment Center, emphasised the complexity of the individual behind concerning behaviour. John Wyman, a former FBI agent and principal in Control Risks’ crisis and security consulting practice, similarly warned that the growing volume of concerning information does not automatically represent a corresponding level of risk.

The practical challenge is no longer merely finding warning signs. It is separating temporary anger, provocative speech and unverified allegations from behaviour that indicates preparation, intent or movement towards harm.

Technology can help collect, organise and prioritise information, but contextual assessment still requires trained human judgement.

For Nigerian organisations, this distinction matters. Reports may originate from security personnel, employees, contractors, access-control records, CCTV observations, online activity or community sources.

Without a defined assessment process, the organisation may either ignore an important warning or overreact to unreliable information.

Threat assessment must become a shared capability

Complex threats should not be left to a single guard, supervisor or technology platform.

A credible assessment process may require contributions from security, operations, human resources, legal advisers, information technology, communications and senior leadership. Each function sees a different part of the situation. Together, they can develop a more complete understanding of the risk and select a proportionate response.

This is particularly important for Nigerian banks, schools, hospitals, residential estates, hotels, energy facilities and event venues. Their threats, responsibilities and operating environments differ, but they share a need for clearly defined reporting and escalation procedures.

Employees and contractors should know what to report, how to report it and what will happen afterwards. The receiving team must be trained to verify the information, assess its significance, document its decisions and determine whether monitoring, investigation, intervention or immediate protective action is required.

A list of suspicious indicators is not enough. Organisations need a disciplined process that considers the individual, the context, the credibility of the information and the potential consequences.

Resilience is supported, not improvised

Travis Mills brought a human dimension to the question of performance under pressure. During his closing keynote, he recounted the injuries he sustained from an improvised explosive device while serving in Afghanistan, the long recovery that followed and the questions he faced about his future as a husband and father.

His account did not present resilience as effortless courage. His recovery was supported by his family, medical professionals, fellow service members and people who helped him recognise that a meaningful life remained possible.

“The turning point was when I accepted my injuries and the day I stopped asking why.” — Travis Mills, GSX 2026 closing keynote

Acceptance did not remove the difficulty of his circumstances. It allowed him to direct his energy towards recovery, purpose and what could be done next. Mills later channelled that purpose into supporting injured veterans and their families through the Travis Mills Foundation.

The organisational lesson is important: resilience should not be reduced to telling employees to remain strong. People perform better under pressure when they have preparation, trusted leadership, appropriate authority, reliable communication and practical support.

For security personnel, resilience also requires attention to welfare. Guards, control-room operators, emergency coordinators and supervisors may work long hours while processing distressing information and making consequential decisions.

Fatigue, confusion and unsupported stress can weaken performance precisely when sound judgement is most important.

What Nigerian organisations should do next

Security leaders should begin by defining the indicators that require investigation or escalation. These should be based on behaviour and credible information rather than stereotypes, assumptions or rumours.

They should then establish who assesses a reported concern. For complex situations, that responsibility should sit with a multidisciplinary group rather than one individual working without sufficient context.

Decision authority must also be clear. During an emerging incident, delay often occurs because information is available but nobody is certain who may restrict access, contact emergency services, suspend an activity, evacuate a location or activate a continuity plan.

Organisations should test whether critical operations can continue if normal communication channels, facilities or key personnel become unavailable. Exercises should assess human decisions and coordination, not merely whether an alarm works.

Every incident and exercise should result in an after-action review. What was detected? What was missed? Where was information delayed? Who lacked authority? Which procedure failed?

Corrective actions should be assigned to named owners, given deadlines and tracked to completion.

Pressure exposes the real system

The central lesson from GSX 2026 Day Three is that threat assessment and resilience cannot be separated.

An organisation may recognise a developing threat but still fail if its people cannot communicate or act. It may have experienced personnel but still struggle if responsibilities are unclear. It may own advanced technology but remain vulnerable if nobody can interpret the information it produces.

Resilience is built before the emergency: through preparation, clear authority, multidisciplinary assessment, tested procedures, capable people and leadership that supports those expected to respond.

When pressure rises, an organisation does not suddenly develop a stronger security system. It discovers the strength of the system it has already built.

Think Security Differently.