It is the last week of the quarter. Your team is closing investor reporting, a capital call is going out to limited partners, and the principals expect clean numbers on time. Then the shared drive stops responding. Email slows to a crawl. The portfolio accounting platform will not load. Nobody in the room can say for certain whether this is a passing glitch or the start of something that eats the next three days.
For a family office, that quiet moment of uncertainty is the real exposure. Not the outage itself, but the discovery that no one is sure what happens next.
September is National Preparedness Month, and this year the theme from the Federal Emergency Management Agency (FEMA) Ready campaign is "Americans Stand Ready." It is a fitting prompt for the people who safeguard multigenerational wealth. Readiness for your family office does not require an all day tabletop exercise. It requires an honest conversation and the willingness to notice which answers feel solid and which rest on assumptions.
The reason this deserves a place on the calendar is straightforward. In Deloitte's Family Office Cybersecurity Report, 43 percent of family offices said they had faced a cyberattack in the past 12 to 24 months, a figure that rises to 57 percent in North America and 62 percent for offices managing more than one billion dollars in assets. Yet nearly a third of those offices had no incident response plan at all, and only about a quarter called their plan robust. That distance between exposure and readiness is exactly where confidence quietly erodes.
Here are the questions worth working through with your team, and what a shaky answer sounds like next to a solid one.
What has to come back first?
A shaky answer is "everything, obviously." A solid answer names an order. If operations stopped this morning, your team should already know whether investor reporting, portfolio accounting, wire and payment approvals, or access to legal and deal documents comes back first. Recovery is a sequence, not a single switch. When you set that sequence in advance, the people restoring systems can protect investor trust and fund operations instead of debating priorities under pressure.
Who is authorized to make the call?
Under stress, unclear ownership shows itself fast. When people do not know who has the authority to act, they wait for approval, duplicate effort, or pull principals into three separate conversations at once. Your office should know who directs the response, who briefs the family, who communicates with limited partners, and who coordinates with your bank, auditors, fund administrator, and IT partner. This is not a bureaucratic org chart. It is the difference between a coordinated response and a scramble.
A 30-minute review, built for fund operations. 
We map your recovery priorities, confirm who owns each decision, pressure-test your backups against a real reporting deadline, and document the systems your office cannot run without. You leave with a written readiness picture, not a sales pitch.
How would we operate if our normal tools were unavailable?
Email, phones, and the document platform feel dependable right up until they are not. If your team could not reach the portfolio accounting system, would they know the fallback for approving a time-sensitive wire? If email were down during a capital call, where would investor communications route? A backup path does not need to be elaborate. It needs to exist and be known before anyone needs it.
Bring your questions. We will help you turn "we think we are covered" into "we know we are" before your next reporting deadline⁉️
What is our single biggest dependency?
Some risks hide in plain sight because they carry the office every day without drawing attention. It might be one custodian connection, one fund administrator, or one long-tenured controller who understands a reconciliation process nobody else has documented. These dependencies feel invisible during a normal week, which is why a single failure can ripple across reporting, payments, and compliance at the same time. Naming your dependency tells you where documentation, cross-training, or a tested backup would remove avoidable fragility.
If a disruption hit tomorrow, what would we wish we had done today?
This question is useful because it puts the principals inside the moment they are trying to avoid. The honest answers usually sound like this: we wish we had documented that process, tested the backup, updated the contact tree, or agreed on the recovery order. None of those tasks feel urgent during a calm quarter, which is precisely why they get deferred. Preparation buys you room to respond instead of reacting.
Where a technology partner fits
After a conversation like this, you will know which answers feel solid and which are resting on hope. That is the point. A strong IT partner helps you close the difference: identifying operational risk, verifying that backups actually restore, documenting the systems behind investor reporting and payments, and connecting technology decisions to how the office is expected to grow. For Houston family offices, that work sits alongside the compliance questions we cover in Reg S-P and the gaps fund managers should close, and the seasonal exposure we flagged in what fund leaders should check during staffing gaps.
It is worth naming the financial logic too. In the IBM Cost of a Data Breach Report 2026, detection, escalation, and lost business from operational disruption accounted for close to two-thirds of the total cost of a breach. In other words, the expensive part is rarely the intrusion. It is the days of disrupted operations and eroded trust that follow. Preparation is what shortens those days.
Where a technology partner fits
Houston family offices trust ECS to keep fund operations steady...
Our engineers work with investment and private capital teams every week to protect investor data, verify recovery, and connect technology to how the office grows. Want to talk through your options? We're here, or call us at (713) 782-4357.
Frequently Asked Questions
They are common and rising. Deloitte's Family Office Cybersecurity Report found that 43 percent of family offices globally experienced a cyberattack in the past 12 to 24 months, climbing to 57 percent in North America and 62 percent for offices with more than one billion dollars in assets under management. Phishing was the most frequent method, involved in the large majority of incidents.
September is National Preparedness Month, an annual prompt from FEMA's Ready campaign to review emergency and continuity plans. For a family office, it lands before year-end reporting pressure builds, so there is room to identify and close gaps while the quarter is still calm rather than during an active disruption.
A backup is a copy of your data. A tested recovery plan proves that the copy actually restores, within a timeframe your operations can tolerate, with the right people knowing their roles. Many offices assume their backups work but have never confirmed it. Testing turns that assumption into evidence before it matters.
Keep it small and senior. Typically that includes the principal or a designated family decision-maker, the person who runs day-to-day operations, whoever oversees finance and reporting, and your technology partner. The goal is to assign clear decision ownership and agree on recovery priorities, not to build a large committee.
A local IT partner can map recovery priorities, verify that backups restore, document the systems behind reporting and payments, and align technology planning with how the office is expected to grow. If you want to review where your family office stands, ECS offers a free, no pressure consultation for Houston investment and private capital teams.
