Operator-grade security training is practitioner-led, on-site or in-environment, fixed in scope, and graded against a deliverable the buyer can defend — not a certificate of attendance printed the morning of the last day. The five criteria below are the test a procurement officer, a commander, or a chief-of-staff should apply before cutting a purchase order. The Vigil Advisory catalog passes each one; most of what is on the open market does not.
The instructor's resume is the program. Ask for documented operational time in the exact discipline they are teaching — not adjacent to it, not "supporting" it, but the operating role itself. A SWAT course taught by a former patrol officer who attended a SWAT school once is a marketing course, not a SWAT course. The Vigil catalog is taught by a 24-year military veteran, an 18-year law-enforcement Police Lieutenant, a SWAT-certified / sniper-trained operator, and a DOJ ICITAP program designer — credentials earned in the field, not bought at a convention. If the vendor's "about the instructor" page reads like a LinkedIn summary rather than a service record, walk away.
Where the curriculum actually comes from is the second question. Real operator-grade material is built from after-action reviews, real incident timelines, court-tested procedure, and doctrine that has been used under pressure — then iterated. Textbook material is reverse-engineered from a vendor's PowerPoint template, padded to a target contact-hour count, and reviewed by no one who has run the technique it describes. The litmus test: ask the vendor to name two specific operational incidents the curriculum is anchored to. A blank stare, a redirect, or a single anecdote about a "client engagement" is the answer that disqualifies them.
Scenarios are where the difference between training and a paid vacation shows up. Scripted scenarios — a role-player at a fixed point, a known entry vector, a predictable decision tree — are rehearsal, not training. Asymmetrical scenarios with branching conditions, communication failures, time pressure, and ambiguous targets are what build the decision-making that survives the field. Ask to see a sample scenario brief, unredacted. If it reads like a checkbox, the program is a checkbox. See how Crisis Response runs scenarios →
A two-day class with twenty-four students and one instructor is a lecture with range time, not training. Coaching ratio — students per instructor during the hands-on segments — is the single most predictive number for whether a student leaves competent or leaves with a certificate. The Vigil catalog caps cohorts at the level the discipline actually requires, and the hands-on segments run at a ratio the instructor can actually supervise. If a vendor will not state their coaching ratio on the sales call, the answer is that they do not want you to do the math.
The deliverable separates a training program from a certification mill. A certificate of attendance is a receipt; it is not a measurement. An outcome-measurable program produces something the buyer can defend — a written assessment against a rubric, a scored scenario, a capstone artifact, a recommendation the employer can action. The right question is not "do students get a certificate" but "what does the buyer hold in their hand thirty days after the cohort ends." See Security Leadership's capstone →
If you are unsure which course you need, start with the Security Maturity Assessment — it scores baseline across the same four domains the catalog covers, and the per-pillar breakdown gives you the language to match a program to the gap. For a written comparison of what makes a security training program worth the budget, read the Security Maturity Assessment pillar guide.
Four practitioner-led courses. Fixed scope. Per-student pricing published up-front, no discovery retainer, no "contact for quote" gating.
View the Training Catalog Or take the free 4-minute assessment first