A VIP is going to be attacked from both the individual and company fronts. When an attacker is researching their target they will be looking for the weakest link, and that may be a personal email account, linkedin, or a social media account. Those entry points, once commandeered, can be used to trick others into doing things using the VIPs name and reputation. So it is important not to leave accounts of this type underprotected. VIPs will be lured into opening harmful attachments and links. They'll be called on the phone and texted by imposters. All of the individual recommendations should be followed, with these recommendations taking things to the next level.