The executive is no longer just an organizational asset. They are a target. And the threat does not stop at the firewall. Today's adversaries pursue senior leaders across every surface: their personal email, their home network, their family members' devices, their social media presence, their travel itineraries, and the physical spaces they move through. Most organizations have invested heavily in enterprise security while leaving their most visible, most consequential people exposed the moment they step outside the corporate perimeter.
This session is a ground-level operational guide for security leaders who need to build, or significantly mature, a cyber executive protection program. It moves past the threat landscape overview and into the practical architecture of a program that actually works.
Attendees will examine how to conduct an executive risk profile assessment that maps digital exposure, personal device hygiene, public footprint, and family-surface risk into a unified threat picture. From there, the session addresses how to structure protection across four domains: device and account hardening, personal network security, open-source intelligence (OSINT) exposure reduction, and travel security protocols for high-risk environments. Each domain includes specific controls, common gaps, and the organizational conversations required to actually implement them, because most executives are not compliant patients and the program has to account for that.
The session also tackles the coordination gap that quietly undermines most programs: the disconnect between the CISO's office, physical security, legal, HR, and the executive's personal staff. Effective cyber executive protection is not a technology problem. It is a program management problem, and this session addresses it as such
* Please note: This is not included in the Main Conference registration and requires a separate registration.