Insights

What a SEVERE threat level means for a family in London

The Palace of Westminster and Big Ben across the Thames at dusk, Valorous Group Insights banner N°17, What a SEVERE threat level means for a family in London

In brief: The United Kingdom’s national terrorism threat level stands at SEVERE, meaning an attack is highly likely, yet London continues to operate in an entirely routine posture. Both statements are true, because the national level describes the country as a whole and says nothing about any one family. What matters for the principal is a current, specific reading of their own exposure, maintained daily and adjusted quietly as the picture moves.

Families and their advisers ask us about this apparent contradiction more often than almost anything else. Each morning our own intelligence briefing opens with the same two facts: the national threat level remains at SEVERE, and London is operating in a normal policing posture. To a reader outside the profession those lines appear to pull against each other. In practice they describe two different things, measured at two different scales.

Recent weeks illustrate the point. A single fortnight has seen counter terrorism arrests connected to a suspected plot against a large religious gathering in Suffolk, a youth remanded over an alleged plot against places of worship in south London, large public order operations in central London, and a conflict in the Gulf reshaping travel and shipping. Throughout all of it, the national level has not moved, and daily life in the capital has carried on largely unchanged. Understanding why is the beginning of a sound security posture.

What does the national threat level actually measure?

The threat level is set by the Joint Terrorism Analysis Centre and published by MI5. It expresses a judgement about the likelihood of a terrorist attack somewhere in the United Kingdom, on a five point scale running from LOW to CRITICAL. SEVERE, the current level, means an attack is highly likely. CRITICAL, the step above, means an attack is highly likely in the near future.

It is a statement about the whole country over an unspecified period. It does not name a city, a district, a community or a date, and it is deliberately insensitive to the daily movement of events. That is why a fortnight of significant counter terrorism activity can pass without the level changing. The level reflects the standing weight of intent and capability across the entire system, not the news cycle.

Why can the level be SEVERE while London feels routine?

Because the two measurements answer different questions. The national level asks how likely an attack is somewhere, at some point. The daily policing posture asks what is actually happening on the ground today. On most days the honest answer to the second question is that London is quiet: transport running normally, public order commitments passing without disorder, casework proceeding beneath the headlines.

Neither reading cancels the other. A SEVERE national level with a calm local baseline has been the ordinary condition of London for much of the past decade. The error is to collapse the two into a single feeling, either of alarm, because the word SEVERE sounds urgent, or of complacency, because the streets look normal. A professional reading holds both at once.

What does the national level not tell a family?

Almost everything that matters to them specifically. The threat level says nothing about whether a particular principal is being researched online, whether a residence has attracted hostile attention, whether a dispute or a public profile has generated a fixated individual, or whether information about the family is circulating after a breach at an adviser. Those risks are personal, not national, and they rise and fall on their own timetable.

The recent cases in Suffolk and south London are instructive. Each involved a specific alleged plot against a specific place, developing while the national level stood still. Specific threats emerge, are detected and are disrupted underneath a static headline number. For a family, the operative question is never the national level. It is whether anything in their own picture has changed, and that question is answered by intelligence work, not by a published scale.

How do we translate the threat picture into a family’s posture?

We begin with an honest baseline: an exposure assessment that establishes what is publicly discoverable about the principal, the family, their residences, their movements and the organisations around them. Against that baseline we maintain a daily reading of the environment, of the kind we publish in outline in our current threat picture, tuned to the places the family actually lives, works and travels.

Posture then follows triggers, not headlines. A protest march along a route the family uses, a court appearance connected to a relevant case, a breach at a firm holding the family’s papers, an event that concentrates crowds near a residence: each prompts a defined, proportionate adjustment, made quietly and usually invisible to the family themselves. This is the discipline that a published national level cannot provide, because it does not know the family exists.

When should a change in the level change anything?

A move to CRITICAL is a genuine signal. It means the authorities judge an attack highly likely in the near future, and it is typically accompanied by visible policing surges and specific advice. In that condition we review imminent engagements, ticketed events and travel through crowded hubs, and we tighten coverage around fixed points in the diary.

Short of that, changes in the level matter mainly as prompts to re-examine assumptions. A raised level ahead of a major public season, for example, sharpens our attention on large gatherings and on the family’s most predictable movements, because predictability, not the level itself, is what an adversary exploits. A lowered level, equally, changes little for a family whose specific picture is active. We adjust to evidence, not to atmosphere.

What does a proportionate response look like day to day?

Measured and almost entirely invisible. It looks like a briefing read before breakfast, routes settled a day early around a march or a closure, a residence review after a pattern of local incidents, and a quiet word before an engagement rather than a visible change of profile. It does not look like reaction to news, and it should never feel like living under a warning.

The families best served by their security arrangements are rarely those with the most visible protection. They are those whose advisers hold an accurate, current picture, who know which developments deserve action and which deserve only a note, and who therefore move through a SEVERE national level with the same ease as any other resident of the capital, while remaining genuinely, rather than apparently, safe.

Frequently asked questions

Does SEVERE mean an attack on London is imminent?

No. SEVERE means an attack somewhere in the United Kingdom is judged highly likely, with no statement about place or timing. Imminence is signalled by the level above, CRITICAL, which means an attack is highly likely in the near future and is normally accompanied by visible policing measures and specific public advice.

Should the family cancel engagements while the level is SEVERE?

Almost never on the basis of the level alone. SEVERE has been a common condition for years and daily life in London proceeds normally within it. Decisions about specific engagements should rest on the specific picture: the venue, the crowd, the route, the family’s profile and anything known about hostile interest. That is an assessment we make case by case.

How would a family know if a threat concerned them directly?

Not from the national level, which carries no personal information. Direct awareness comes from protective intelligence: monitoring of open sources and relevant reporting for the family’s names, properties and interests, liaison with police where appropriate, and structured assessment of any approach, communication or pattern of attention that touches the family. Building that capability is a core part of our intelligence work.

Who sets the United Kingdom threat level?

The Joint Terrorism Analysis Centre, an inter agency body hosted by MI5, sets the national threat level for terrorism, and MI5 publishes it. It is reviewed formally at regular intervals and changed whenever the underlying intelligence judgement changes, independent of public or political pressure.

A confidential conversation

The published threat level is the beginning of a conversation about a family’s security, never the end of it. At Valorous Group we maintain the daily intelligence picture, establish each family’s true exposure and keep protection proportionate to evidence, so that the principal reads the same headlines as everyone else and knows precisely what, if anything, they mean for their own household. We are based at 78 Pall Mall, London, and any conversation is treated in the strictest confidence. Contact us to arrange a discreet discussion.


How Valorous Group can help

We provide daily intelligence monitoring, exposure assessment and intelligence led protection for principals and families, translating the national threat picture into a posture specific to each household.

Speak with us in confidence

Previous Post
Daily intelligence briefing: 4 August 2026
Next Post
Hostile surveillance is the gap in most close protection teams
Confidential by design

Speak with us in confidence.

Tell us, in outline, what you need to protect. We reply promptly and privately, and only ever hold the detail you are comfortable sharing.