top of page
RISK PRIORITIES
Understanding the Ten Domains of Risk
Prioritization
Critical
High
Moderate
Potential
Insider Threats
Operational
Data Breach of Family Information
Privacy
Fraud or Embezzlement
Financial
Non-compliance with Financial and Trade Regulations
Legal & Regulatory
Cyber-Physical Security Vulnerabilities
Technological
Kidnapping & Extortion Threats
Physical
Home Invasion & Forced Entry
Physical
Security Risks During Family Travel
Physical
Gaps in Evacuation/Crisis Response Plans
Operational
Major Market & Investment Losses
Financial
Lack of Strong Access Controls & MFA
Technological
Significant Legal Exposure from Poor Structuring
Legal & Regulatory
Reputational Crisis from High-Profile Incident
Reputational
Major Crisis Management & Response Failures
Reputational
Staff Background Check Failures
Operational
Weak Vendor /
3rd-Party Oversight
Operational
Sharing Family Data with Unvetted 3rd Parties
Privacy
Outdated / Unpatched Systems
Technological
Unauthorized Physical Surveillance
Physical
Overdependence on Key Personnel
Strategic
Weak Security at Family Events & Gatherings
Physical
Damage/Theft at Family Properties
Physical
Secure Disposal Failures
Privacy
Stalkers, Paparazzi & Invasive Media
Privacy
Social Media–Facilitated Physical Threats
Technological
Lawsuits from Partners / Vendors / Investors / Suppliers / Employees
Legal & Regulatory
Failure to Encrypt Sensitive Communications
Privacy
Inadequate Data Storage & Backup
Technological
Misaligned Family Office Structure & Governance
Legal & Regulatory
NDA Failures (Staff/ Vendor / Advisors)
Legal & Regulatory
Poor Succession Planning & Leadership Continuity
Strategic
Failure to Vet & Monitor Vendors Properly
Operational
Conflict of Interest / Internal Family Disputes
Strategic
Negative Publicity from Social Media Posts
Reputational
Geolocation & Tracking Risks
Privacy
Lack of Structured Disaster / Business Continuity Plans
Operational
Major Currency Exchange / Liquidity Crisis
Financial
Unauthorized Smart Device (IoT) Access
Technological
Deepfake / AI Manipulation
Technological
“Digital Kidnapping” / Hostage Simulation
Technological
Synthetic Identity Fraud
Technological
Biometrics & Next-Gen Tech Risks
Technological
Exposure of PII on Deep/Dark Web
Privacy
Metadata Leakage & AI Risks
Privacy
Drone Surveillance & Unauthorized Aerial Threats
Physical
Remote Work Vulnerabilities
Operational
Marriage / Divorce Planning Gaps
Strategic
Lack of Ongoing Family Education & Next-Gen Development
Strategic
Long-Term Family Power Struggles
Strategic
Failure to Adapt to Changing Tech (Quantum, AI)
Technological
Non-Compliance with Employment Laws
Legal & Regulatory
Vendor / Supplier Failures Impacting Operations
Operational
Political Instability in Regions of Investment
Political
Terrorism/Targeted Attacks on High-Profile Families
Physical
Environmental Hazards, Fire, Natural Disasters
Physical
Infrastructure Damages (Power Outages, Facility Failures)
Operational
Occupational Health Risks in Family Businesses
Health
Pandemics or Biosecurity Threats
Health
Healthcare Crises (Chronic Illness, LTC Needs)
Health
Substance Abuse & Addiction Within the Family
Health
Elder Abuse in Nursing/Long-Term Care
Health
Political Activism or Donations Causing Backlash
Political
Visa & Citizenship Issues for International Families
Legal & Regulatory
Non-Compliant Art/Antiquities Acquisition
Legal & Regulatory
Military Conflicts & War Risk Exposure
Political
bottom of page