Executive Impersonation Defence Adviser — Global Hospitality

The mandate

The board's standing concern is how employees and partners should authenticate consequential executive requests when familiar voice, image, messaging style and situational detail can all be convincingly reproduced. Different properties have improvised secret phrases, callback lists and varying levels of video distrust, creating controls that are fragile, culturally inconsistent and easy to bypass during real emergencies.

The adviser provides three days each month, attends quarterly Lisbon board sessions and joins the scheduled Madrid treasury and Dubai property exercises. One monthly challenge forum reviews a high-risk communication journey such as emergency payment, guest-safety direction, public statement, acquisition confidentiality or credential reset. Urgent advice is available within one business day after a material impersonation event, without becoming round-the-clock incident command.

The engagement lasts nine months and may be renewed once for up to three months if the insurer or board requires a final independent exercise. Renewal must state the unanswered governance question, fixed cadence and continued absence of conflicts. It cannot be used to outsource normal fraud approval, executive communications or security awareness ownership after the agreed decision system is in place.

The adviser has no line authority and takes no executive responsibility. Management owns verification routes and incident decisions, treasury retains financial controls, and communications determines public assertions; no payment, communication, investigation, employee-discipline, property-command or technology-purchase authority transfers. The adviser can test whether routes remain usable under coercion and urgency, recommend failure triggers and challenge executive exceptions, but cannot authenticate a live request for an employee.

Conflicts cover synthetic-media vendors, identity and communications platforms, cyber insurers, fraud investigators, hospitality suppliers and executive-protection firms. Current commissions, retainers, referral arrangements, equity and paid endorsements must be declared. A new commercial relationship with a vendor under consideration requires prior committee review, and recusal may be required even where technical information is publicly available.

Why the board wants this voice

Impersonation succeeds by exploiting authority, urgency and context, not merely by producing a technically sophisticated fake. Detection tools will remain probabilistic and may fail precisely when an employee must act quickly across languages and time zones. Independent challenge can align human verification, transaction controls and trusted public channels without promising that any voice or image is inherently genuine.

What you will own

• Map consequential executive requests across payments, guest safety, public statements, credentials, confidential deals and property continuity actions.
• Challenge verification routes for urgency, coercion, unavailable approvers, multilingual teams, compromised channels and colluding internal identities.
• Test executive willingness to follow the same out-of-band confirmation, delay and escalation requirements imposed on employees.
• Frame evidence thresholds separating suspected impersonation, account compromise, malicious editing, genuine executive error and public misinformation.
• Advise exercises that combine convincing media, authentic context, supplier-channel compromise and real operational time pressure.
• Review insurer, law-enforcement and communications interfaces without allowing attribution claims to outrun preserved technical and human evidence.
• Leave the committee a trust-channel map, executive exception log, exercise findings and indicators of verification fatigue or workarounds.

Candidate qualifications

• Advised boards or executive teams on impersonation-enabled fraud, social engineering, trusted communications or high-value payment controls.
• Can evidence a realistic exercise or incident where contextual manipulation defeated an apparently strong technical detection control.
• Understands synthetic voice and video limitations, account compromise, transaction verification and evidence-sensitive public response.
• Has challenged senior executives who sought convenience exceptions from authentication or dual-approval safeguards.
• Worked across distributed operations where language, hierarchy, guest safety and time-critical decisions complicated verification.
• Maintained product neutrality while assessing identity, communications, deepfake detection, insurer and investigation providers.