I normaly put a spy and an assasin in every settlement. A spy to counter spy agents and a asasin so that when other agents get close you cna easily eliminate them. I use ths to protect everything from generels to diplomts and so on.