Blog
Executive Protection
Before Year-End: How to Prepare Your Executive Security Tax Position for 2027
As you close out 2026 and plan for 2027, your CFO and compensation committee are reviewing how executive security expenses were reported, and they're deciding what changes need to be made before the next proxy filing. If your executive protection program lacks independent, documented justification for the threats it addresses, those expenses may need to be reclassified as taxable compensation to the executive. That means higher tax liability for your executives, grossed-up compensation costs for the company, and uncomfortable questions from the board about why the documentation wasn't in place.
The good news: there's still time to prepare for 2027. A Nisos Executive Vulnerability Assessment (EVA) completed before year-end can give your security consultant and tax advisors documented, role-specific threat findings to inform how you treat executive security costs going forward.
The Problem: Spending Without Documentation
Executive security costs money. Personal security details, secure transportation, residential security systems, digital monitoring—these expenses add up quickly. Under normal circumstances, employer-provided benefits like these would be treated as taxable income to the executive. But Treasury regulations allow an exclusion for the security-related value of certain transportation, such as trained bodyguard/chauffeurs and specially equipped vehicles, when there is a bona fide business-oriented security concern. Other security costs, such as residential systems and digital monitoring, need their own working condition fringe analysis.
The key phrase: bona fide business-oriented security concern.
Without independent documentation of the threat environment, you're left defending the expense with nothing more than "we thought it was necessary." That's not enough for an audit.
The Solution: A Third-Party, Business-Based Threat Assessment
An EVA, part of our Executive Shield service, gives your tax, HR, and legal teams a third-party analysis of the specific threats facing your executives—based on their role, public profile, and actual exposure.
The EVA isn't just a threat report. It's documentation that can inform your executive protection program, including what risks to address, and why those risks are tied to the individual's position and responsibilities—not personal preference.
What an EVA Covers
A properly structured EVA examines the full scope of risk your executives face:
1. Physical Vulnerabilities
Pattern of life exposure from social media and digital platforms that can be used for stalking, surveillance, and harassment. Publicly available personally identifiable information such as utility records, property records, and campaign donations that can be exploited by attackers.
2. Digital Vulnerabilities
Uncovers potential digital gaps that increase the risk of cyber threats. This includes doxxing threats, where public exposure of executive or family information could be exploited for blackmail, threats, or intimidation. High-profile credentials are high-value targets for attackers seeking unauthorized access through credential theft.
An assessment should also identify leaked credentials and personally identifiable information from password breaches or third-party compromises, as well as impersonation risks where fake accounts or misuse of executive identities could create security concerns.
3. Threat Environment Analysis
Analysis of social media, extremist forums, and the deep/dark web for risk indicators. Mapping of exposed PII across digital, physical, and social channels. Assessment of reputational risks including targeted misinformation or sensitive data disclosures, social media activity on sensitive or controversial topics, and negative sentiment trends.
The result is a documented record of the specific, role-related risks your security program is designed to address.
Why This Matters for Tax Treatment
Under Treasury regulations issued under Internal Revenue Code Section 132, the security-related value of certain transportation can be excluded from an executive's taxable income when it is provided for a bona fide business-oriented security concern. The regulation requires a specific basis for concern about the executive's safety, such as a threat of death, kidnapping, or serious bodily harm because of the executive's role. A generalized concern for safety does not qualify.
An EVA can contribute to that showing. It documents:
- The nature and source of threats facing the executive
- Why those threats are connected to their position and responsibilities
- What vulnerabilities exist that security measures are designed to address
- Information your security consultant can use to judge what protection is reasonable given the risk
End-of-Year Planning: What You Can Still Do
For 2026 expenses: If you've already spent on executive security this year without documentation in place, talk with your tax advisors now about how those costs should be reported. An assessment completed now reflects current conditions. It does not retroactively establish a business rationale for security already provided.
For 2027 planning: Get ahead of the problem. An EVA completed in Q4 2026 positions you to enter the new year with current, documented threat findings to inform your executive protection program. Your security consultant and tax advisors can build on those findings, and your security program starts the year on solid footing.
Threat environments don't wait for budget cycles. The risks your executives face today may not match the ones your current program was built for. The EVA gives you an objective view of the threats as they stand today.
Who Needs to Care About This
CHROs and Compensation Committees
You help decide how executive security is treated for tax purposes. The EVA gives you documented threat findings to inform that decision. SEC proxy disclosure follows separate rules, and executive security is generally still disclosed there as a perquisite.
CFOs and Tax Teams
You're responsible for the company's tax position. The EVA provides third-party threat documentation your advisors can consider when evaluating whether security costs qualify for exclusion from executive income.
General Counsel and Risk Officers
You manage enterprise risk and ensure the company's decisions can withstand scrutiny. The EVA documents the credible, business-related threats your executive protection program should address, so decisions rest on evidence rather than speculation or executive preference.
CISOs and Security Leaders
You're already protecting executives. The EVA helps you assess what protection is warranted, supports budget justification, and gives your cross-functional partners documentation to draw on.
What Makes an EVA Useful
Not every threat assessment is useful for tax and compliance purposes. To support your program, an EVA needs to be:
Independent
Conducted by a third party outside your organization. The findings must reflect professional judgment, not a predetermined conclusion. Nisos assessments reflect the independent professional judgment of its analysts based on information available at the time of the assessment.
Specific
Tailored to the individual, their role, and their actual exposure—not a generic risk profile copied from a template.
Current
Threat environments change. Assessments reflect conditions as of the assessment date, and an assessment from several years ago won't hold up under scrutiny.
Documented
The methodology, sources, and findings must be clear enough to hand to an auditor or advisor without explanation.
Start With Documentation
You're already investing in executive protection—or you're about to. The EVA helps document the threats behind that investment for your board, your auditors, and your tax advisors. And if you act before year-end, your finance and legal teams enter 2027 with current threat documentation in hand.
Know the threat. Document the need. Defend the spend.
Nisos delivers Executive Vulnerability Assessments as part of Executive Shield, our digital executive protection solution. We help organizations see what an attacker sees—and act before they do.
Nisos does not provide tax, legal, or accounting advice. Information about the tax treatment of executive security is general in nature and is not intended to be relied upon for any tax or legal decision. Consult your own tax and legal advisors regarding your specific circumstances.
Nisos makes no representation or guarantee that any assessment, report, or service will result in any particular tax treatment, including exclusion from income under Internal Revenue Code Section 132. Tax treatment depends on facts and circumstances determined by the client and its advisors.
Any tax benefit depends on the client's own determinations, documentation, and implementation of recommended security measures. Nisos is not responsible for client decisions regarding implementation, reporting, withholding, or disclosure.
Frequently asked questions about IRS Section 132 and Executive Security
About Nisos®
Nisos is a trusted digital investigations partner specializing in unmasking human risk. We operate as an extension of security, risk, legal, people strategy, and trust and safety teams to protect their people and their business. Our open source intelligence services help enterprise teams mitigate risk, make critical decisions, and impose real world consequences. For more information, visit: https://nisos.com.