Key people
Changes in owner, management, and family exposure: new roles, controversies, and signals that belong in protective reporting.
Advisory
Security consulting for management
Part-time External Security Director: monthly risk brief on changes in the threat landscape and priorities to present to the board.
monthly risk briefmonitoring exposure changesprioritized by impact
He is responsible for this service
Tomáš Šlesinger
GBH Group Security Advisor
Let's start with reality, not a catalog of measures.
Most of the risks surrounding running a business don't come as one big event. The exposure changes gradually: there will be a public appearance, a new partner, a sensitive meeting or a trip to a less familiar environment. Each change seems small on its own — without someone holding them in a single threat picture, but it fits into the operational agenda and you only notice it when the fallout is being addressed. At the same time, management safety is not a comfort: it is a duty of care — the company's responsibility for the safety of its people, which the board must be able to demonstrate with decisions, not impressions.
- Management exposure changes on an ongoing basis, not in project terms.
- The individual exposure change looks small; the dangerous thing is that no one holds them together.
- Without a single threat picture, priorities get lost between operations and the day-to-day agenda.
- Management safety is the board's duty of care, not the owner's personal comfort.
Scope
What the product is — and what it isn't.
Includes
- Monthly review of changes in management's threat picture
- Priority list of measures s by the owner at each point
- Consultation line for urgent decisions
- Coordination of specialists inside and outside the group
- A written brief which stand in front of the board
Does not include
- It does not replace acute intervention or physical security of the object
- We do not track third parties or collect non-public information
- It isn't one-time audit with one output
- We do not take operational decisions for management
Procedure
First the reality. Then measures.
-
01
Monthly rhythm
Intelligence requirements
We set intelligence requirements: what exactly to watch in management and why — people, sensitive dealings, counterparties, journeys and public exposure.
-
02
Monthly rhythm
Prioritization
We evaluate the changes according to probability and impact, separate the critical ones from the noise and assemble them a prioritized list of actions with an owner at each point.
-
03
Monthly rhythm
Coordination of specialists
Depending on the situation, we will add cyber security, defensive technical inspection (TSCM — wiretapping detection), personal protection, infrastructure or due diligence (deep due diligence of the counterparty).
-
04
Monthly rhythm
Revision
Each month we review what has changed in the threat landscape and re-prioritize.
Coverage
We don't track "everything". We keep a narrow circle of domains where management exposure is actually changing and where there is value in catching the change before it becomes an incident.
Information and data
Sensitive negotiations, approaches and operational security — the places where information leakage would hurt the most.
Partners and counterparties
New relationships, acquisitions, and dependencies where vetting should happen before signing, not after.
Travel and visibility
Digital trail of leads, appearances and journeys — in the logic of travel risk management (ISO 31030).
Operational dependencies
Places, people and systems, the failure of which would stop the business from making decisions.
Crisis preparedness
Plans, contacts and roles verified by staff exercise, not just stored in a file.
Output for management
Monthly risk brief
Short structured document (PDF) + personal or online consultation
What the document contains
- What's changed in the threat landscape and why we're watching
- Evaluation of changes according to probability and impact
- recommendations, what to deal with now and what can wait
- Open points and owner of each step
- Suggestion of when to connect a specialist or include a module
The brief is deliberately short and written in such a way that it can be placed on the board's table without rewriting. The goal is a decision, not a stack of pages — each point has an owner.
Role and mode
Who decides and how we cooperate.
- 01
Senior Advisor (one contact)
Single point of contact for management; keeps the threat picture in time and is responsible for the risk brief.
- 02
Coordinator of Specialists
Depending on the situation, they will involve cyber security, defense technical inspection, personal protection or due diligence.
- 03
Management / board (decision-making right)
The decision remains with the client; we provide background, priorities and recommendations.
Operational log
- By default monthly risk brief and a new order of priorities.
- Half-yearly staff exercise (TTX — crisis decision-making exercise) or program maturity assessment.
- Consultation line available between appointments for urgent decisions.
- Extraordinary review at the launch: incident, M&A, new public exposure.
- Form
- An ongoing flat rate, not a one-off project. Fulfilling external security director role part-time.
- Ramp up
- We start by setting up intelligence requirements and mapping the status; the first risk brief usually within a few weeks of the agreement.
- Involvement in the team
- We supplement internal people and existing suppliers, we do not take over their role or operation.
- Scope by scenarios
- Depth is determined by the client's real-world scenarios and the maturity of their program, not a one-size-fits-all package of services.
Discretion
There is no one to learn about cooperation with us. We work in mode need-to-know (only for those who really need the information). We store materials securely, keep meetings discreet and do not present ourselves as a "security company" in communication. Discretion is part of the service, not an extra charge — and it applies equally to you, your family and your people. There are legal limits to confidentiality — we'll tell you up front so you know what you're in for.
- Nondisclosure Agreement (NDA) as standard
- Secure storage of documents and communication
- Low profile meetings, no visible "security" trail
- Screened and contracted people on the team side
Standards and the law
Trusted capacity, within the limits of the law.
- A team with experience in security, IT and crisis management
- Screened and contracted specialists
- Work within the framework of the relevant authorizations and concessions
- Procedures in accordance with GDPR and the protection of personal data
- The methodology is based on the logic of ISO 31000, 22301 and 31030 standards
We work within the law. We don't do what's over the edge. We recommend only legal, reasonable measures and adhere to GDPR. We do not monitor third parties, we do not obtain non-public data and we do not use offensive or eavesdropping means against anyone — active eavesdropping belongs by law only to law enforcement authorities. We draw information about people exclusively from legal and public sources.
Proof system
Specifically, but discreetly.
A service detail should not end with a promise. It shows an anonymized scenario, methodology and output that management will really use.
We do not show the client. We show the decision.
- 01 A find. Which is really weak.
- 02 Procedure. Who decides and when.
- 03 Output. Monthly risk brief
Deliverable preview
Monthly risk brief
- What's changed in the threat landscape and why we're watching
- Evaluation of changes according to probability and impact
- recommendations, what to deal with now and what can wait
Part of the GBH group
GBH Partners
Crisis logistics and evacuation as part of client preparedness.
GBH Capital
Investment division of the security infrastructure financing group.
GBH Cyber
Cyber and data resilience as a permanent part of consulting.
GBH Bunker
Protected infrastructure that the consultancy will recommend and design.
GBH Academy
Training and practice that translates recommendations into real behavior.
Related services
All services
Investment risk
Due diligence and screening
counterparty and beneficial owner due diligence
risk memo with the severity of the findings
recommendation: sign, negotiate, withdraw
Digital resilience
Cyber and data resilience
digital footprint map
incident response (IR) plan
priorities for management
Leadership readiness
Preparing for a crisis
readiness assessment
crisis playbook
staff exercise (TTX)
Questions for decision
How does a flat rate differ from a one-off audit?
An audit is a snapshot of the state at one point in time and it gets old quickly. This is an ongoing job: every month we monitor changes in the threat landscape, keep priorities and add a module as needed — a leadership digital footprint assessment, a staff exercise or a counterparty due diligence.
Will anyone find out that we are working with you?
Not if you don't want it yourself. We work on a need-to-know basis, we sign non-disclosure agreements, we keep our meetings low-key and we don't appear to be your security firm. But discretion has legal limits — we don't cover up criminal activity and we talk about it openly in advance.
Can you vet a specific person or partner for us?
Yes, but only from legal and public sources and in accordance with GDPR. We do not track third parties, use pretexts or access non-public registers. When it makes sense, we'll hand the review over to specialized due diligence — and we'll always tell you how far you can legally go.
Will it burden our team and operations?
The goal is the opposite. The brief is short and aimed at a decision, not the next agenda. We complement your people and existing suppliers, not take over their work. Most of the month, one point of contact and a short review is enough; more happens only at the launcher.
When does it make sense to start the service?
Typically, when a company is growing rapidly, there is public visibility, M&A or sensitive negotiations are underway — and no one holds the management exposure in one picture. If you don't have your own security director, a flat rater fulfills his role on a part-time basis. It can be launched at any time, without waiting for an incident.
What if you run into a serious problem while revising?
We'll say it straight and without drama. We'll describe what's happening, how likely it is, and how it affects your decision-making. We will propose steps according to priority and, if necessary, immediately connect the relevant specialist. We do not scare and do not guarantee zero risk.
Non-binding first consultation
"We'll briefly go over your situation and tell you if an advisory makes sense — and what you might not need at all. No obligation and discreet."
Tomáš Šlesinger · GBH Group Security Advisor
Contact us
Discuss your crisis preparedness with us
Initial consultation
Tell us what you need help with.
Briefly describe your situation and leave your contact details. We will arrange a suitable time to talk.
Call