Skip to content

Understand the individual behind the concern.

When an individual, account, or pattern of contact causes concern, the immediate question is rarely who they are. It is what is known, what can be established, what is changing, and what should happen next.

Greywing develops the available intelligence around a person of interest and presents it with clearly stated confidence.

In this section

  1. 01What this work involves
  2. 02On attribution
  3. 03Continuity
  4. 04Escalation

What this work involves

  • Develop available intelligence around the subject or account
  • Identify relevant public-source information
  • Assess potential connections to other accounts, incidents, or individuals
  • Maintain a chronology of contact and behaviour
  • Assess behavioural changes over time
  • Evaluate indicators of escalation
  • Identify intelligence gaps and what would be required to close them
  • Support proportionate escalation where warranted

On attribution

We do not promise to identify anonymous individuals. Some accounts can be attributed on the available evidence; many cannot.

Where attribution is possible, it is expressed according to the strength of the evidence and an explicit level of confidence. Where it is not possible, we say so, and we set out what is known about the behaviour regardless of identity.

Continuity

Person of interest records are maintained over time so that a renewed approach months or years later is recognised as part of an existing chronology rather than treated as a new and isolated event.

Escalation

Where intelligence indicates that action is required, it is packaged for the client's security team, legal advisers, relevant platforms, or law enforcement. Decisions on action remain with the client and the appropriate authorities.

Contact

Discuss a person of concern.

If you believe there is an immediate threat to life or safety, contact the appropriate emergency services.