Organizations can think about executive protection in three simple steps: assess, design and then deliver.