GABCOENTERPRISES Book
Aerial view of the Grand Cayman coastline and reef
  1. Home
  2. Who we serve
  3. Family offices

Discreet IT and security for family offices.

Family offices hold some of the most sensitive information there is, often with a small team and no IT department. We bring the security of a large firm without the overhead, and we keep it quiet.

Obligations

The rules that may apply

Family offices differ widely, so this depends on what yours does. Your legal advisers confirm your position.

CIMA

Regulation depends on your activities

  • The blanket exemption for single family offices was repealed in 2020.
  • A single family office now needs to be registered with or licensed by CIMA only if it conducts securities investment business.
  • If yours is regulated, CIMA’s Rule on Cybersecurity for Regulated Entities applies.
Read the CIMA rule guide
PERSONAL DATA

Data Protection Act (2021 Revision)

  • Applies whether or not CIMA regulates you.
  • Family members’ and staff records are personal data, and need appropriate security.
  • Report a personal data breach to the Ombudsman and the people affected within five days.
Read the breach notification guide
RISK

You are a target either way

  • Wealth, travel and public profiles make family offices a focus for fraud.
  • Most attacks start with email: an impersonated principal or a changed bank account.
  • Good controls protect the family as much as the office.
Read the endpoint security guide
Common gaps

Where the gaps usually are

What reviews, audits and incidents tend to find first.

  • Family members use personal email and devicesSensitive documents end up in personal inboxes and cloud accounts the office cannot see or protect.
  • Payments approved by email aloneOne convincing message from an impersonated principal is enough. A second person and a call back stop it.
  • Multi factor authentication is missing somewhereUsually on the accounts that matter most, because they belong to the busiest people.
  • One person knows how everything worksWhen they leave or are unavailable, so do the passwords and the know how.
  • Travel is treated like being in the officePublic Wi-Fi, lost devices and border checks need their own plan.
How we help

Where we fit in

Take one service or several, under one agreement and one named lead.

Free tools

See where you stand

Work through them on screen. Nothing is sent unless you ask for a copy.

Questions

We are not regulated by CIMA. Does any of this apply to us?

The Data Protection Act applies whether or not CIMA regulates you, and the fraud risks are the same. Whether CIMA regulates your office depends on your activities: since 2020, a single family office conducting securities investment business needs to be registered or licensed. Your legal advisers confirm your position.

Can you support family members, not just office staff?

Yes, by arrangement. We agree in writing who is covered, so the family gets the same protection as the office.

How do you handle confidentiality?

We agree confidentiality terms in writing before work begins, and keep access to your systems limited to the people doing the work.

Let’s talk about your firm.

Tell us what you're working on. We'll listen, ask the right questions and recommend a practical next step. No obligation.

info@gabcoenterprises.com+1 345 769 4222
Book a consultation