Every gap.
A path to close it.
Twelve named remediation paths mapped to the Sanctuary Framework — not a menu to browse before we understand your household. Each recommendation in your private model links here, so work is deliberate, sequenced, and scoped after assessment.
One day onsite. A complete picture of your family's risk — and a living model you keep.
The Sanctuary Gap Assessment scores 156 controls across people, institutions, and lifestyle — then leaves you with a private model and a prioritized path forward.
One day onsite assessment
Illuminate exposure. Then shrink it.
We map what the internet knows about your family, staff, entities, and properties — then execute a disciplined reduction plan.
2–3 days remote + onsite validation
Who can reach what — and how that access is granted, limited, and revoked.
MFA, password architecture, privileged credentials, and staff access lifecycle — implemented without breaking how your household actually works.
1–2 day onsite + remote follow-through
Every connected device. Every camera. Hardened with precision.
We segment your networks, harden IoT and cameras, and integrate physical and cyber alerting — without the integrator theater.
2–5 days onsite per property
Training that changes behavior — because the greatest risks are human.
Tailored training for principals, family office staff, household employees, and children — with live scenarios, not slides.
Half day onsite + staff modules
Custody architecture you can live with — and survive without exposing seeds.
Hardware wallets, multi-signature design, signing ceremonies, and signer redundancy — designed for your family, not a exchange checklist.
1–2 days advisory + implementation oversight
Living playbooks for the scenarios you hope never happen.
Written plans, retainers, contact trees, and tabletops — for cyber breach, home intrusion, extortion, and reputational crisis.
3–5 days development + tabletop
Detect adverse events before they become crises.
Identity exposure, endpoint anomalies, financial transaction flags, and reputational signals — reviewed by people who know your household.
Ongoing program
Global exposure, philanthropy, and public life — assessed with discretion.
Travel destinations, board affiliations, philanthropic visibility, and protest exposure — mapped to your actual routines.
Advisory engagement
Policies, vendor oversight, and advisor coordination — the administrative layer that makes controls stick.
Who decides, who approves wires, how vendors are vetted, and how policies survive staff turnover.
2–4 week program
Restore operations, reputation, and confidence after disruption.
RTO/RPO targets, insurance alignment, backup validation, and reputation recovery — tested, not theoretical.
2–3 week program
Keep the living model current as your family and threat landscape evolve.
Annual reassessment, playbook updates, metrics, and a direct line when something feels wrong.
Ongoing
Every gap has a path forward — named after assessment, not browsed before we understand your household.
Selected as needed · sequenced from your roadmap · optional annual advisory retainer