Executive Impersonation Defence Adviser — Global Hospitality

The mandate

The board’s standing concern is how employees and partners should authenticate consequential executive requests when familiar voice, image, messaging style and situational detail can all be convincingly reproduced. Recent attempts combined a cloned regional president’s voice with a compromised supplier thread and a fabricated crisis video. Different properties improvised secret phrases, callback lists and blanket video distrust, creating controls that are fragile, culturally inconsistent and easy to bypass during real emergencies.

The adviser provides three days each month, attends quarterly Lisbon board sessions and joins the scheduled Madrid treasury and Dubai property exercises. One monthly challenge forum reviews a high-risk communication journey such as emergency payment, guest-safety direction, public statement, acquisition confidentiality or credential reset. Urgent advice is available within one business day after a material impersonation event, without becoming round-the-clock incident command.

The engagement lasts nine months and may be renewed once for up to three months if the insurer or board requires a final independent exercise. Renewal must state the unanswered governance question, fixed cadence and continued absence of conflicts. It cannot be used to outsource normal fraud approval, executive communications or security awareness ownership after the agreed decision system is in place.

The adviser has no line authority and takes no executive responsibility. Management owns verification routes and incident decisions, treasury retains financial controls, and communications determines public assertions; no payment, communication, investigation, employee-discipline, property-command or technology-purchase authority transfers. The adviser can test whether routes remain usable under coercion and urgency, recommend failure triggers and challenge executive exceptions, but cannot authenticate a live request for an employee.

Conflicts cover synthetic-media vendors, identity and communications platforms, cyber insurers, fraud investigators, hospitality suppliers and executive-protection firms. Current commissions, retainers, referral arrangements, equity and paid endorsements must be declared. A new commercial relationship with a vendor under consideration requires prior committee review, and recusal may be required even where technical information is publicly available.

Why the board wants this voice

Impersonation succeeds by exploiting authority, urgency and context, not merely by producing a technically sophisticated fake. Detection tools will remain probabilistic and may fail precisely when an employee must act quickly across languages and time zones. Independent challenge can align human verification, transaction controls and trusted public channels without promising that any voice or image is inherently genuine.

What you will own

• Map consequential executive requests across payments, guest safety, public statements, credentials, confidential deals and property continuity actions.
• Challenge verification routes for urgency, coercion, unavailable approvers, multilingual teams, compromised channels and colluding internal identities.
• Test executive willingness to follow the same out-of-band confirmation, delay and escalation requirements imposed on employees.
• Frame evidence thresholds separating suspected impersonation, account compromise, malicious editing, genuine executive error and public misinformation.
• Advise exercises that combine convincing media, authentic context, supplier-channel compromise and real operational time pressure.
• Review insurer, law-enforcement and communications interfaces without allowing attribution claims to outrun preserved technical and human evidence.
• Leave the committee a trust-channel map, executive exception log, exercise findings and indicators of verification fatigue or workarounds.

Candidate qualifications

• Advised boards or executive teams on impersonation-enabled fraud, social engineering, trusted communications or high-value payment controls.
• Can evidence a realistic exercise or incident where contextual manipulation defeated an apparently strong technical detection control.
• Understands synthetic voice and video limitations, account compromise, transaction verification and evidence-sensitive public response.
• Has challenged senior executives who sought convenience exceptions from authentication or dual-approval safeguards.
• Worked across distributed operations where language, hierarchy, guest safety and time-critical decisions complicated verification.
• Maintained product neutrality while assessing identity, communications, deepfake detection, insurer and investigation providers.

Non-negotiables

• Will attend all Lisbon, Madrid and Dubai sessions included in the agreed advisory calendar.
• Has no undisclosed financial relationship with a detection, identity, communications or fraud-response bidder.
• Accepts no authority to approve payments, authenticate live instructions or issue public incident statements.
• Brings executive and operational decision judgment beyond generic phishing training or awareness-campaign experience.

1. 49 words maximum. Which contextual detail made an executive impersonation attempt credible despite existing controls?
2. 49 words maximum. How would you verify an urgent guest-safety instruction when every familiar channel may be compromised?
3. 49 words maximum. Which vendor or insurer relationship could constrain your independent advice here?