Scope of use

Plainly: what we do, and what we don't.

This page describes the boundaries of our engagement. It is not legal advice. Your engagement letter and NDA govern the specifics.

What we do

  • Assess your office and family surface against CIS v8.1 / NIST CSF 2.0.
  • Design wire-verification and payment-fraud controls, and train your team on them.
  • Deliver incident-response readiness: runbooks, tabletops, and on-call response.
  • Coordinate with your bank, insurer, custodians, and law enforcement during an incident.
  • Run family exposure-footprint work using public and data-broker sources.

What we don't do

  • Execute payments or release wires — your office owns execution.
  • Guarantee fraud prevention or any specific security outcome. No control is fraud-proof.
  • Provide physical or close-protection security. We coordinate and say when to hire one.
  • Provide legal, tax, or investment advice — engage your own professionals.
  • Take custody of the family's financial data, documents, or credentials.
  • Perform investment due-diligence or fraud-vetting of deals.
We advise and train; the office owns execution. No engagement makes a wire “fraud-proof,” and we make no such claim anywhere. If a fraudulent instruction still gets through, the controls exist to shorten your first hour and improve your recall odds — not to remove human judgment from the wire desk.