Wealth Security & Privacy (Cyber & Physical)

Program Description

Business-owning and high-net-worth families have become targets for increasingly sophisticated criminals, who employ techniques on a par with those used by intelligence agencies to exploit digital and human vulnerabilities. One figure says it all: 38% of UHNWIs and HNWIs do not have a cybersecurity plan in place. This module exists to close that gap.

The program covers the four fronts of wealth protection: personal and family cybersecurity — spear phishing, whaling, identity theft, advanced social engineering; device and home network security, from the router to the smart home; digital privacy and the shielding of wealth-related data, with footprint minimization and media exposure management; and the prevention of financial crime, from wire transfer fraud and money laundering to the deepfakes used in virtual kidnappings. The in-person format includes interactive discussions, analysis of real cases and hands-on simulations.

It is taught by Sandro García-Rojas, international consultant and founding partner of LEX-QUO, former supervisor of the Mexican financial system at the CNBV and Mexico's representative before the United Nations, FATF, the OECD and the Council of Europe. The result is a comprehensive playbook — cyber and physical — to shield the family, its information and its legacy.

General Objective

Raise awareness and equip participants with knowledge, strategies and practical tools to identify and mitigate the cyber and physical risks that threaten high-net-worth families. Upon completion, participants will be able to design cyber and personal security protocols, implement measures to protect wealth-related data, strengthen digital privacy and apply compliance principles to prevent financial crime within the family environment.

Learning Objectives

• 01Identify the cyber risks targeting HNWIs and UHNWIs: spear phishing, whaling, identity theft and account takeover.
• 02Design family cybersecurity protocols: social media rules, NextGen checklists and the two-channel, two-person rule.
• 03Harden devices and home networks: IoT segmentation, WPA3, VPN, disk encryption and at-home incident response.
• 04Implement digital privacy strategies: footprint minimization, opting out of data brokers and shielding wealth-related data with encryption and DLP.
• 05Recognize financial crime typologies: CEO fraud, money laundering, extortion and voice and video deepfakes used in virtual kidnappings.
• 06Apply supervision and compliance measures: KYC/EDD, screening against OFAC/UN lists and PEPs, and the four-eyes rule for out-of-routine payments.
• 07Integrate physical and cyber security into a single family playbook, including cyber insurance and K&R (Kidnap & Ransom) policies.

Why Take This Program

1. Taught by Sandro García-Rojas, international consultant (LEX-QUO) and former regulator and supervisor of the Mexican financial system at the CNBV.
2. The instructor has represented Mexico before the United Nations, FATF, the OECD and the Council of Europe.
3. It responds to a striking figure: 38% of UHNWIs and HNWIs do not have a cybersecurity plan in place.
4. Integrates cyber and physical security into a single program: one unified wealth protection playbook.
5. Interactive in-person format, with analysis of real cases and hands-on simulations.
6. 3 sessions from 7:00 to 9:00 pm Mexico City time: comprehensive protection in a single week.
7. Premium venues: Club de Industriales in Polanco and IADA Anáhuac.
8. Protocols actionable from day one: the two-channel, two-person rule, NextGen checklists and incident logs.
9. Covers emerging threats: voice and video deepfakes, virtual kidnappings and targeted wire transfer fraud.
10. Includes risk transfer: cyber insurance and K&R (Kidnap & Ransom) policies, with their scope and exclusions.

Syllabus — Key Topics

• Key risks for HNWIs/UHNWIs: spear phishing, whaling, identity theft and account takeover
• Advanced social engineering: exploitation of the public footprint and combined attack vectors
• Mandatory digital hygiene: MFA, password managers and monitoring of data leaks and the dark web
• Family cybersecurity protocols and social media usage rules
• Checklists for minors and NextGen: privacy by default and scam education
• Alternate-channel verification: the two-channel, two-person rule for financial instructions
• Comprehensive smart home assessment: asset inventory and connectivity mapping
• Network and device hardening: WPA3, VLAN segmentation for IoT, VPN and disk encryption
• At-home incident response: network isolation, credential rotation and bank notification
• Digital footprint minimization: opting out of data brokers and pseudonyms for reservations and travel
• Shielding wealth-related data: information classification, encrypted communications and DLP
• Media exposure management and press and crisis protocol
• Financial crime: CEO fraud, money laundering, extortion and deepfakes for virtual kidnappings
• Supervision and compliance: KYC/EDD, OFAC/UN and PEP screening, and the four-eyes rule
• Complementary physical security: routine variation, vendor control and safe rooms
• Risk transfer: cyber insurance and K&R (Kidnap & Ransom) policies

Faculty

Sandro García-Rojas — Consultor Internacional y Socio Fundador, LEX-QUO