Why this matters
Family-office work moves between properties, devices, and personal accounts. An attacker only needs the one weak link to gain access and commit financial fraud.
Step by step
- Issue managed, encrypted devices rather than allowing personal computers for work.
- Require a VPN and multifactor authentication for all remote access.
- Agree an incident plan: who is called first when something goes wrong.
- Encourage all team members to prioritize strong, unique passwords or passphrases for all accounts.
- Establish clear policies for handling, storing and sharing sensitive documents.
- Regularly update devices and promptly install patches to address new software vulnerabilities.
- Train all staff and family members to recognise phishing and social engineering.
BlackCloak tips
Treat home networks of Principals as part of the office and monitor them accordingly. Run regular tabletop exercises so everyone knows their role during an incident.