That it is. From my 16 years experience on this, this is the threat matrix:Wouldn't this be kind of normal at one of these events, though? What does it take to be considered 'suspicious'? If it is just odd behavior, 4 seems kind of low.
1. Person of Interest - A person known by name or face that has had prior contact with the principle (protectee) and is to be monitored for whatever reason
2. Suspicious - A known or unknown person that has a behavioral indicator that the person is engaged in an activity that could develop into a threat (panhandler where there normally isn’t one, person segregated from the crowd or within the crowd that is engaged in behavior inconsistent with the event)
3. Possible Threat - A person within the protective perimeter who has engaged in any activity which could propose an attack on the principle (Focused gaze without coinciding, appropriate body language, hands out of sight, pre-attack indicators, items that could be a weapon)
4. Threat - Anyone reaching this level has accumulated enough points up the matrix that the protective detail should be addressing this person and removing them from the situation, keeping the principle in a secure location, or evacuating the principle calmly.
5. Active Threat - Protective detail engagement (meaning SHTF and the two way range was opened) with the threat AND evacuation of the principle, post haste.
Items #1-4 no one in the crowd ever really knows about because it’s behind the scenes. #5 is the movie/TV excitement that everyone sees. I never had to do #5 but got up to #4 plenty of times.