Intelligence products

What happened

Two separate activist networks are focusing on the same fictional event. Public posts increasingly identify speakers, sessions and the venue. Eleven items explicitly call for presentations to be interrupted. No credible plan to injure a speaker has been identified.

Why it matters now

• ✦visible disruption is likely
• ✦targeted sessions are more exposed than the event as a whole
• ✦livestreaming increases amplification
• ✦an excessive response could create greater reputational damage
• ✦lower evidence of physical harm does not remove the need to protect stages, movements and access points

Immediate actions

• ✦brief venue security
• ✦brief stage managers
• ✦keep executives out of physical intervention
• ✦review public exposure of movements
• ✦prepare communications
• ✦monitor for escalation indicators

BLUF: Bottom Line Up Front

• ✦Selected sessions at the Meridian Leadership Forum are highly likely to face planned, non-violent activist disruption.
• ✦Two unrelated issue-motivated networks are separately focusing on named speakers and sponsors.
• ✦Current reporting supports visibility and reputational pressure as the main intent, not physical harm.
• ✦Risk is highest around livestreamed keynotes, named speakers and access points.
• ✦Enhanced but proportionate controls are advised, and executives should not personally intervene in physical incidents.

Additional relevant detail

• ✦Activity increased as the event approached.
• ✦Eleven public items explicitly encouraged interruption of presentations.
• ✦Eighteen items identified a speaker, session time or location.
• ✦Three accounts were linked in the synthetic dataset to previous non-violent disruption.
• ✦No credible direct threat, weapon reference, stalking pattern or plan to injure a speaker was identified.
• ✦No evidence showed coordination between the two activist networks.
• ✦Livestreamed sessions increased the potential reach of even a short interruption.

Assessment

• ✦High confidence: selected sessions are likely to face deliberate disruption.
• ✦Moderate confidence: the disruption will remain non-violent.
• ✦Moderate confidence: the main objective is reputational pressure and online amplification.
• ✦Low confidence: any claim that the campaigns intend physical harm to a speaker.

MLCOA: Most Likely Course of Action

A small number of activists use normal attendee or public access to interrupt one or more named sessions with verbal protest, banners or a short sit-in. The activity is filmed and amplified online.

• ✦short programme delay
• ✦strong social-media visibility
• ✦staff distraction
• ✦reputational pressure
• ✦limited direct safety impact

MDCOA: Most Dangerous Course of Action

Assessed as low likelihood on current evidence. A participant crosses a restricted boundary or makes a direct approach to a speaker and the intervention develops into a physical confrontation near the stage or an executive movement route. A second disruption could divide security attention.

• ✦injury
• ✦emergency event pause
• ✦evacuation
• ✦substantial reputational amplification
• ✦longer-term executive-security review

Advisory

• ✦Before: identify exposed speakers and sessions, review published movement information, brief venue security and stage teams, agree how disruption will be handled, prepare communications lines and define escalation thresholds.
• ✦During: use trained security staff, keep executives out of physical confrontation, maintain continuity where safe and avoid unnecessary escalation.
• ✦After: record the incident, preserve footage and logs, review online amplification, reassess focal points and update protective measures.

Bottom line

The event is highly likely to attract deliberate, non-violent interruption intended to create visibility and reputational pressure.

Current evidence supports planned disruption of selected presentations more strongly than an intent to harm executives.

Speaker naming, venue information and interest in internal access justify additional controls around the most exposed sessions.

What makes this a business issue

• ✦a short interruption can dominate coverage of a much larger event
• ✦security, communications, HR and legal teams can become involved simultaneously
• ✦a poor response from an executive or employee can become the main story
• ✦suppliers and sponsors can become secondary targets

Decision points

• ✦accept that some visible protest may occur
• ✦focus on safety and continuity
• ✦apply enhanced controls where evidence justifies them
• ✦use security professionals for physical incidents
• ✦prepare communications before the event