Privacy Notice
FracSec uses analytics to understand site traffic. No personal data is sold or shared. You may decline non-essential tracking at any time. Privacy Policy
PERSPECTIVES
Independent perspectives on executive cyber risk, board governance, and the decisions that carry personal consequences.
Most boards treat cybersecurity as a technology problem delegated to the CISO. The SEC disagrees. Here is what informed oversight actually requires — and why the gap between the two creates personal liability.
The terms are used interchangeably. They should not be. The difference between a fractional CISO and a vCISO is not semantic — it determines whether you get independent judgment or managed services in a suit.
Family offices combine concentrated wealth, thin security infrastructure, and high-value personal data in a single, largely unregulated environment. Threat actors have noticed. Most family offices have not.
The cybersecurity industry is built on the premise that more is always better. More tools, more monitoring, more controls. This is not always true. Sometimes the most defensible decision is deliberate inaction.
The SEC's cybersecurity disclosure rules create new personal obligations for executives and board members at public companies. Understanding what you are now required to disclose — and when — is not optional.