--- title: "Cyber Resilience Guides by Role | Firevault" description: "Cyber resilience guides by role for boards, CFOs, CIOs, CISOs, IT directors, risk and compliance leaders and security architects, from Firevault." lang: en-GB json-ld: | [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Protect what matters with Offline Secure Storage and control what moves with Control by Firevault. Physically disconnected, always reachable by you.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] } ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "knowsAbout": [ "Offline Secure Storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Protect what matters with Offline Secure Storage and control what moves with Control by Firevault. Physically disconnected, always reachable by you.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/learn/guides/by-role#webpage", "url": "https://fire-vault.com/learn/guides/by-role", "name": "Cyber Resilience Guides by Role", "description": "Cyber resilience guides by role for boards, CFOs, CIOs, CISOs, IT directors, risk and compliance leaders and security architects, from Firevault.", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://fire-vault.com/images/og/og-base-learn.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/learn/guides/by-role#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/learn/guides/by-role#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Learn", "item": "https://fire-vault.com/learn" }, { "@type": "ListItem", "position": 3, "name": "Guides by role", "item": "https://fire-vault.com/learn/guides/by-role" } ] }, { "@context": "https://schema.org", "@type": "CollectionPage", "name": "Firevault Role Guides", "description": "Role-based cyber resilience guides for boards, finance, technology, security, infrastructure, compliance and architecture leaders.", "mainEntityOfPage": "/learn/guides/by-role", "author": { "@type": "Person", "name": "Mark Fermor" }, "publisher": { "@type": "Organization", "name": "Firevault" }, "hasPart": [ { "@type": "Article", "headline": "Cyber Security for Boards", "url": "https://fire-vault.com/learn/guides/cyber-security-for-boards", "about": "Board and managing directors" }, { "@type": "Article", "headline": "Cyber Risk, Financial Resilience and Recovery", "url": "https://fire-vault.com/learn/guides/cfo-guide-cyber-risk-financial-resilience", "about": "CFO and finance directors" }, { "@type": "Article", "headline": "Cyber Resilience, Architecture and Recovery", "url": "https://fire-vault.com/learn/guides/cio-cto-guide-cyber-resilience", "about": "CIO and CTO" }, { "@type": "Article", "headline": "Risk, Recovery and Physical Control", "url": "https://fire-vault.com/learn/guides/ciso-guide-cyber-resilience", "about": "CISO and heads of security" }, { "@type": "Article", "headline": "Ransomware Recovery, Backups and Resilience", "url": "https://fire-vault.com/learn/guides/it-director-guide-ransomware-recovery", "about": "IT directors and infrastructure" }, { "@type": "Article", "headline": "Controls, Evidence and Assurance", "url": "https://fire-vault.com/learn/guides/cyber-risk-and-compliance-guide", "about": "Risk, compliance and governance" }, { "@type": "Article", "headline": "Physical Isolation, Segmentation and Resilience", "url": "https://fire-vault.com/learn/guides/security-architecture-guide", "about": "Security architects" } ] } ] --- Recent Breaches Breaches [2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Lidl GB Customer contact data ](https://www.theguardian.com/business/2026/jun/11/lidl-gb-third-party-data-breach)[2026 Asahi Group Production systems disrupted ](https://www.reuters.com/technology/cybersecurity/asahi-says-cyberattack-disrupted-operations-japan-2025-09-29/)[2026 Kido International 8K records ](https://www.bbc.co.uk/news/articles/c623d7v0e5xo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o)[2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Lidl GB Customer contact data ](https://www.theguardian.com/business/2026/jun/11/lidl-gb-third-party-data-breach)[2026 Asahi Group Production systems disrupted ](https://www.reuters.com/technology/cybersecurity/asahi-says-cyberattack-disrupted-operations-japan-2025-09-29/)[2026 Kido International 8K records ](https://www.bbc.co.uk/news/articles/c623d7v0e5xo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o) [View All →](/learn/breaches) [![Firevault - offline secure storage, physically disconnected from the internet](/assets/logo-color-DBVl0KCg.png)](/) Products Solutions [Why OSS](/why-oss) More [Help](/help)[Get started](/get-started) Why OSS # Cyber Resilience Guides by Role Seven guides, one for each seat at the table. Each one starts with what the role is responsible for, the decisions it owns, the questions to ask and the evidence to expect, and only then covers where Firevault fits. Book a demo ![Corridor of offline storage racks inside a Firevault bunker](/assets/hero-square-bunker-B6Y7Qt9r.jpg) R1 ## Choose the guide that matches your accountability Responsibility for cyber resilience is shared, but it is not identical. A board needs assurance and evidence. Finance needs a loss model. Technology and security leaders need architecture and containment. Compliance needs control effectiveness. Each guide is written for one of those jobs. [ Board and managing directors · Foundational ### Cyber Security for Boards You are accountable for cyber risk without running security. This guide sets out what the board owns, what it should delegate, the questions to put to management and the evidence to expect back. Read the guide ](/learn/guides/cyber-security-for-boards)[ CFO and finance directors · Foundational ### Cyber Risk, Financial Resilience and Recovery You are asked to fund security without a way to price the risk it removes. This guide builds the loss model first, then reads what cyber insurance genuinely transfers and what stays retained. Read the guide ](/learn/guides/cfo-guide-cyber-risk-financial-resilience)[ CIO and CTO · Intermediate ### Cyber Resilience, Architecture and Recovery Recovery fails on dependencies, not on tooling. This guide maps identity, management plane, cloud and supplier dependencies, then sets out how to design a recovery architecture that survives them. Read the guide ](/learn/guides/cio-cto-guide-cyber-resilience)[ CISO and heads of security · Advanced ### Risk, Recovery and Physical Control You already have detection. This guide concentrates on attack paths, blast radius after a privileged compromise, containment speed and an honest statement of residual risk. Read the guide ](/learn/guides/ciso-guide-cyber-resilience)[ IT directors and infrastructure · Intermediate ### Ransomware Recovery, Backups and Resilience Immutable, air-gapped and offline are not the same thing. This guide covers the rebuild sequence, identity recovery, recovery credentials and restore testing that produces a defensible RTO. Read the guide ](/learn/guides/it-director-guide-ransomware-recovery)[ Risk, compliance and governance · Intermediate ### Controls, Evidence and Assurance Auditors ask whether controls work, not whether they exist. This guide covers risk treatment, control effectiveness, third-party assurance, exceptions and the evidence that survives challenge. Read the guide ](/learn/guides/cyber-risk-and-compliance-guide)[ Security architects · Advanced ### Physical Isolation, Segmentation and Resilience Almost every control in a modern estate is configuration. This guide works through trust boundaries, failure domains, Layer 1 isolation, Zero Trust dependencies, the Purdue Model and IEC 62443. Read the guide ](/learn/guides/security-architecture-guide) ## How these guides relate to the Firevault portfolio Firevault is the company. It provides [Offline Secure Storage®](/offline-secure-storage) for a defined set of critical records and clean recovery data, nine [Control Modules](/control) that govern the physical paths into an estate, and seven [Control Blueprints](/control-blueprints) that combine those modules for a named outcome. Each role guide introduces only the parts that are relevant to that role. If you are unsure which applies, the [Firevault Concierge](/find-my-oss) works through the questions without a sales conversation. ![Mark Fermor](/assets/mark-fermor-aWtKNSv7.jpg) ![David Bailey](/assets/david-bailey-Dgqj8eaE.jpg) ![Kenny Phipps](/assets/kenny-phipps-CVyooRsR.jpg) Online Now Concierge ## Which offline secure storage solution is right for you? Answer a few quick questions and we will recommend the right solution, whether that is a personal vault or a scalable offline storage system built for your needs. Takes about 2 minutes. No account needed. Find Out Free 2 mins No sign-up