Training and briefings
We train people for the environment they travel to, with their routes, their vehicles and their escalation chain. A generic high-risk course teaches a curriculum. We teach the situations most likely to happen where this particular team is going, which is as often a medical emergency as a security one.
What the work covers
Medical training is the larger half of what we teach. First aid and emergency training for teams working a long way from an ambulance, scaled to what a site can realistically hold and keep current. Bleeding control and first response for a project team. Emergency medicine for close protection and executive protection teams, where the medic moves with the principal, carries almost nothing visible, and has to handle a cardiac event as readily as a wound. Full refreshers for remote medics who have not seen a serious case in months. And on running projects, emergency drills for the people already on site, for the incidents that place actually produces.
On the security side sit HEAT for people going into crisis and high-risk areas, travel risk and security briefings, and workshops on the judgement that no certificate covers, meaning journey management, situational awareness, conduct at checkpoints and how a team behaves when a plan stops working. Crisis exercises for the people who will hold the named crisis team roles. Train the trainer courses where the goal is for your own team to run the course next year.
The shortest and most used format is the pre-departure briefing. One hour on the destination, the arrival, local conduct, medical provision and how to reach us, for a single traveler or a whole team.
Cultural understanding runs through every course we teach. Most of what goes wrong on a deployment goes wrong between people. At a checkpoint, in an argument over a room, in a refusal nobody meant as one. Reading that correctly prevents more incidents than any technique we could teach in the same hour.
Teaching is not a sideline here. Our management teaches at university level and has developed several e-learning modules.
Who teaches
Instructors are assembled per course, against the client, the country and where the emphasis falls. Who teaches a medical refresher in West Africa is not who teaches checkpoint behavior for a media team.
What they have in common is that they have run the situation themselves. Soldiers, police officers, emergency physicians, paramedics, close protection officers, height rescue technicians and communications specialists, each brought in for the part they actually know.
The difference shows in the scenario work. Someone who has stood at a checkpoint explains why that particular movement at that particular point becomes dangerous. That is also why we do not sell an operational background as a qualification on its own. It has to come with the ability to teach, and we pick for both.
Where corners get cut
The most common saving is the instructor ratio. A course sold for twenty people with one instructor is a lecture with props, and the people who most need the practice are the ones who watch. The second is buying a certificate rather than a course, usually because a donor or a client asks for a document, not a capability. The third is training people once and never again, when the perishable skills, meaning bleeding control, radio discipline and drills, decay within months.
None of that shows until something happens. What it costs then is a team that has the equipment, holds the certificate and still stands still.
How we weight HEAT
Many HEAT courses spend much of their time simulating captivity. We weight ours differently. The deadliest moments of a kidnapping are the seizure itself and any escape or rescue attempt, and after that point a hostage's own options narrow to compliance and endurance. Almost everything a traveler can genuinely influence happens before capture. So our training concentrates on recognizing, avoiding and defusing the situations that lead there. Conduct in captivity is taught as knowledge to carry, not as an experience to rehearse.
In practice that means journey management, route and accommodation selection, profile and pattern management, surveillance detection, checkpoint behavior, rehearsed actions-on (pre-agreed responses to defined events), communication rules with agreed tripwires, preparation of proof-of-life questions, and digital footprint hygiene.
The medical content is held to the same test. People practice what a traveler can do before professional help arrives.
Where your sending organization prescribes a format, we deliver that format, abduction module included. A mandated six-day HEAT is delivered as a mandated six-day HEAT. Our own weighting applies where the choice is yours.
After a seizure the work belongs to a different discipline anyway. Resolution runs through kidnap and ransom insurance and specialist response consultants, and the party with real agency is your organization, not the person taken. That is precisely why we train your crisis team separately.
One honest limit belongs here. Outcome evidence for security training as a whole is limited, and nobody can seriously demonstrate that a particular course format prevents incidents. So we build courses from incident data and from what is known about adult learning. And HEAT remains one control inside a travel risk program built to ISO 31030.
Who delivers on the ground
The design, the curriculum and the teaching are ours. Where a course leads to a regulated qualification, a certificate from a specific national body, or clinical practice on real patients, it runs through an accredited local training provider and the certificate comes from them. We name that limit up front, because a certificate that is not recognized where you need it is of no use to you.
Standards we work to
Questions we get asked
What is our exposure if we send someone unprepared?
Larger than most buyers expect, and there is a decided case that shows it. In 2015 the Oslo District Court found the Norwegian Refugee Council grossly negligent after one of its staff was shot and abducted in Kenya, and awarded him around NOK 4.4 million. What created the liability was what had been left undone before the seizure, not the abduction itself. The employee was freed by an armed operation, the one phase nobody can train for.
The question after an incident is rarely whether it could have been prevented. It is whether the organization did what it had said it would do. Training is one part of that answer, alongside the assessment, the briefing and the record that both happened.
Is there a recognized standard for HEAT?
No, and it is worth knowing that before buying. There is no formally recognized international HEAT standard. No body certifies these courses, no minimum duration is fixed, and no content list is binding.
What exists is sector buyer guidance. The Global Interagency Security Forum publishes material for the humanitarian sector, the ACOS Alliance works on it through the Industry Standard for Safety Training and the International News Safety Institute alongside it in journalism, and individual sending organizations set their own frameworks. Some providers have their courses checked against a general quality mark, which says something about how a course is organized and nothing about what is in it.
Two things follow for you. A HEAT certificate carries the reputation of the provider, not the weight of a standard. And the only question that matters is whether the organization sending you recognizes that course. We settle that beforehand.
Is there a certificate?
Yes, and it is worth looking closely at which one. We document attendance, content, duration and date. That record says what it says, namely that someone completed this content at this depth with us.
Regulated qualifications are a different matter, because there the law or the client dictates who may issue them. In Germany, section 26(2) of the DGUV Vorschrift 1 allows only people trained by an authorized body to serve as workplace first aiders. The same pattern applies to GWO modules for the wind industry and to anything requiring clinical practice on real patients. In those cases we arrange delivery through an approved body and the certificate comes from them.
HEAT has no such authority, because no recognized international standard exists. A HEAT certificate is therefore worth what the provider issuing it is worth. Whether your sending organization will accept it is something we settle beforehand.
How large should a group be?
Course size is the wrong number. What matters is how many participants there are per instructor, and how much of the time each person is doing something rather than watching.
The solid numbers on this come from medical simulation research. Different field, same underlying problem. For procedural skills, groups of two to four are most effective and effectiveness declines above about six. Adult learning guidance adds the rule of thumb that participants should be actively doing something at least seventy percent of the time.
In practice a group of twelve is no problem as long as enough instructors are there and the work happens in small groups. The same group with a single instructor is one where most people watch. We plan on one instructor per three participants as a rule, and a full-format scenario exercise runs with at least four instructors. That floor comes from the roles, because role play, safety cover, exercise control and observation cannot be held by the same person.
For small groups we build the course differently. Fewer large scenarios, and more practical work in short repeated cycles where each person takes a turn several times. The outcome is equivalent, the route to it is not, and which format you get is settled beforehand. Ask a provider for the number of instructors, not the number of seats, for the same reason. Briefings and awareness sessions scale far beyond that, because nobody has to acquire a physical skill.
Do you train in country?
Usually, and it is generally the better option. The scenarios then use the real roads, the real hospital and the real radio net, and people practice with the vehicles and equipment they will actually use. Transfer into daily work is far higher than on a training site in Europe.
Three things get settled first. The legal position, because security training is licensable in some countries, and training props that resemble weapons or uniforms are regulated almost everywhere. We run the course through a training partner licensed in that country. The optics, because a scenario that looks like a real incident from a distance is itself a risk, so local authorities, the site and the neighborhood are informed beforehand. And the situation, because where it makes in-country delivery unsafe the course runs in a neighboring country while the content stays specific, with the same routes, hospitals and contacts in the exercise material.
Other capabilities
Travel risk management and duty of care
Travel risk programs built to ISO 31030, thresholds through escalation.
Learn moreMedical support and rescue planning
Medical concepts, staffing plans and the full MEDEVAC chain.
Learn moreClose protection and executive protection
Protective concepts, advance work and command, low profile by design.
Learn moreRisk and threat assessment
Country and site analysis, surveys and audits that end in decisions.
Learn moreCrisis and emergency management
Crisis structures with named roles, exercised before handover.
Learn moreTalk it through first
Every engagement starts with a confidential conversation, and it is free. Describe the operation and the concern. We will tell you whether this is the right capability, another one, or nothing at all.
enquiries@foxpedition.com