Treeline Risk Group
Treelıne RISK GROUP

Information security, enterprise risk and board advisory

Senior security and risk judgment, without the full-time hire.

Treeline advises boards, executives and technology leaders across industries, with particular depth in financial services and digital assets. It is led by a former CISO who has built security, risk and technology functions from the ground up. You get an experienced operator’s view of where you stand, what you should do, and how to explain it to a board, regulator or auditor.

What is changing

AI tools are lowering the cost of finding and probing targets at scale, and attackers are already using them. Much of the autonomous-attack hype still outruns reality, because people remain in the loop, but the direction is clear: faster, cheaper reconnaissance against every organization. Much of the exposure sits with third parties, and boards and regulators are asking harder questions. An advisory relationship puts experienced judgment in place before the call comes, at a scale most organizations can sustain.

When clients call

  • Security or risk is young or stretched thin, and you need to know where to start for the most impact.
  • Security and risk are owned by a CTO or other executive on top of a full-time day job.
  • The board or a committee is asking for an independent view of cyber and enterprise risk.
  • A regulator, auditor, investor or customer is asking questions you want to answer with evidence.
  • You depend on custodians or critical vendors and need a clearer view of the risk they carry.
  • Informal practices have been outgrown and you need a first formal program.

Where Treeline advises

Information and cybersecurity

Assess program maturity, set strategy and priorities, and advise on architecture, control design and incident readiness.

Enterprise risk management

Advise on risk methodology and governance, and shape the reporting that committees and boards act on.

Custody security

Advise on threat models and control design, and guide how to evaluate custodians and emerging technologies.

Third-party and vendor risk

Guide risk-tiered program design and recommend where deeper independent assessment is warranted.

Privacy and regulatory readiness

Advise on Reg S-P and state privacy approach, and prepare leaders for regulator and auditor engagement.

Resilience and protection

Advise on business continuity, disaster recovery, executive and brand protection, and insider threat programs.

How Treeline works

Advisory retainer

Ongoing access to senior judgment, with regular briefings for leadership and the board.

Defined projects

Maturity assessments, strategy and roadmaps, and board briefings, with fixed scope and written recommendations.

Board and advisory roles

Board and advisory board seats, bringing a risk and security perspective to the table.

Building toward self-sufficiency

Define the roles, vendors and milestones you need, introduce trusted providers and candidates, and guide the handoff so your team can run it on its own.

Track record

  • Built and led security, risk and technology teams at both a global multi-asset investment firm and a digital asset-focused investment platform.
  • Built multiple enterprise risk management programs from the ground up, from risk register and methodology through governance and board reporting.
  • Built and directed a custody security program recognized as one of the strongest in digital assets.
  • Led multiyear security and technology transformations in partnership with CTOs and CIOs, without disrupting the business.
  • Built executive protection and third party risk management programs, in environments where much of the risk is physical or sits in the hands of third parties.
Norah Beers

Norah Beers

Founder and Principal

Norah Beers is the founder and principal of Treeline Risk Group. She spent five years as Chief Information Security Officer at Grayscale Investments, the world’s largest digital asset-focused investment platform, where she built and led the information security, enterprise risk, custody and technology functions. Before that, she spent twelve years at Bridgewater Associates in security and risk roles, leading information security and enterprise risk management for its investment engine through a major technology transformation alongside the CTO and CIOs. A Dartmouth College alum, she is known for making security a trusted partner to the business, not an obstacle.

LinkedIn profile

Speaking and recognition

Start a conversation

Tell us what you are facing. Initial conversations are confidential and carry no obligation.

Email Treeline