• What changed: supply-chain breaches (luxury/lifestyle, tax/accounting), RaaS hitting shared advisers, AI-enabled impersonation, and “data exhaust” from public lives.
• Why it’s different for FOs: the blast radius isn’t just systems—it’s children’s schools, travel patterns, structures, and future deal intent.
• A 12-month resilience roadmap the governance committee