> ## Documentation Index > Fetch the complete documentation index at: https://chainpatrol.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # Who Should Be Involved in Brand Protection > Key stakeholders and team members essential for effective brand protection Effective brand protection requires collaboration across your organization. This guide identifies the key stakeholders who should be involved and explains their unique contributions to your security program. ## Key Stakeholders ### Knowledge Owners These team members have the most profound understanding of your brand, its legitimate presence, and authorized activities. **Why they're critical:** Founders and executives have the complete picture of your company's strategic direction, partnerships, and official communications. **What they contribute:** * Know all official company accounts across platforms * Understand authorized partnerships and affiliate relationships * Can quickly identify unauthorized use of company branding * Make final decisions on brand protection policies and budgets * Approve official responses to brand impersonation incidents **When to involve them:** Initial brand protection program setup Incidents affecting company reputation Brand protection investments and policies CEO fraud or executive social media impersonation **Why they're critical:** Marketing teams create and manage most of your brand's public-facing presence. **What they contribute:** * Maintain comprehensive lists of all official social media accounts * Know current and past marketing campaigns that scammers might impersonate * Understand your brand's visual identity, messaging, and voice * Track influencers, ambassadors, and partners authorized to represent your brand * Identify subtle brand guideline violations that others might miss **When to involve them:** Setting up brand monitoring configurations Reviewing potential impersonation threats Determining if promotional content is legitimate Creating response templates for brand abuse cases Training other teams on brand guidelines **Why they're critical:** Security teams bring technical expertise and incident response capabilities. **What they contribute:** * Understand phishing tactics and social engineering techniques * Can assess technical sophistication of threats * Know your organization's security tools and infrastructure * Have established incident response procedures * Connect brand protection to broader security strategy **When to involve them:** * Initial system setup and security configuration * Evaluating high-risk threats * Incidents involving credential theft or data breaches * Integration with existing security tools and workflows * Security awareness training programs **Why they're critical:** Developers understand your technical infrastructure and can help identify technical impersonation. **What they contribute:** * Know all legitimate domains, subdomains, and APIs * Understand your application's technical fingerprint * Can identify fake apps, cloned websites, and API abuse * Implement technical integrations with brand protection tools * Develop custom detection rules or automation **When to involve them:** Identifying all legitimate technical assets Setting up API integrations and webhooks Creating custom detection rules for technical threats Reviewing threats targeting developer communities ## Threat Reporters These team members are your eyes and ears, often the first to spot brand abuse in the wild. **Why they're critical:** Your community often encounters scams before your internal teams do. **What they contribute:** * First-hand experience with phishing attempts targeting your users * Real-time visibility into social media impersonation * Ground-level perspective on what threats actually affect users * Authentic feedback on potential false positives **How to enable them:** Provide easy reporting mechanisms (dedicated email, web form, Discord channel) Create clear guidelines for what to report Acknowledge and thank community reporters Share general updates about brand protection efforts (without sensitive details) Consider a bug bounty or reward program for security reports **Why they're critical:** Ambassadors have large followings and are frequent impersonation targets. **What they contribute:** * Report impersonation of their own accounts that reference your brand * Identify scams targeting your community through their channels * Help educate their followers about legitimate brand communications * Amplify official security warnings **How to enable them:** Brief them on common scam patterns targeting your community Give them a direct contact for urgent reports Provide them with official statements they can share Monitor for impersonation of their accounts related to your brand **Why they're critical:** If you have a Security Operations Center (SOC), analysts monitor threats 24/7. **What they contribute:** * Continuous monitoring of security alerts and threat feeds * Triage and prioritize brand protection alerts * First-line analysis of potential threats * Escalate high-priority incidents to appropriate teams * Document and track incident patterns **How to enable them:** * Integrate ChainPatrol alerts into existing SOC tools (SIEM, ticketing systems) * Provide clear escalation procedures and runbooks * Define severity levels and response SLAs * Give access to brand protection dashboards * Include brand protection metrics in SOC reporting **Why they're critical:** Support teams interact directly with customers who may have fallen victim to scams. **What they contribute:** * Receive direct reports from users who encountered scams * Identify patterns in customer complaints about suspicious communications * Gather detailed information about scam tactics from victims * Provide immediate assistance to affected customers * Reduce impact by quickly identifying and escalating threats **How to enable them:** Train them to recognize and document phishing reports Create templates for customer responses about security incidents Give them a clear process to escalate brand abuse reports Include them in post-incident reviews to improve response Provide regular updates on active threats to watch for **Why they're critical:** Comms teams manage public messaging during and after security incidents. **What they contribute:** * Craft official statements about brand impersonation incidents * Coordinate public warnings about active scams * Monitor social media and news for brand mentions related to scams * Manage reputation during high-profile incidents * Interface with media during major security events **When to involve them:** * Widespread scams affecting many users * Incidents gaining media attention * Coordinated takedown efforts that should be publicized * Creating proactive security awareness campaigns * Responding to public questions about brand security ## Technical Implementation These team members handle the integration and technical setup of brand protection tools. Handle infrastructure and access Build custom integrations Manage support tool workflows **Why they're critical:** IT teams manage your organization's technology infrastructure and access controls. **What they contribute:** * Provision access to brand protection tools for appropriate staff * Integrate tools with existing IT infrastructure * Manage SSO and authentication for security platforms * Ensure compliance with IT security policies * Handle technical troubleshooting and vendor coordination **When to involve them:** * Initial tool procurement and setup * User access management and permissions * SSO configuration and integration * Network and firewall configuration for tool access * Regular access reviews and audits * Technical troubleshooting **Why they're critical:** Engineers can build custom integrations and automation. **What they contribute:** * Develop custom integrations using brand protection APIs * Build internal dashboards combining multiple data sources * Create automated workflows for threat response * Develop custom detection logic for your specific use case * Implement webhook handlers for real-time alerts **When to involve them:** Building integrations with internal tools Automating repetitive brand protection tasks Creating custom reporting or dashboards Developing organization-specific detection rules **Why they're critical:** Support operations teams manage support tools and workflows. **What they contribute:** * Integrate brand protection alerts into support ticketing systems * Configure routing rules for security-related support tickets * Build custom views and reports for support teams * Train support staff on new tools and processes * Optimize support workflows for efficiency **When to involve them:** * Integrating with support platforms (Zendesk, Intercom, etc.) * Creating macros and templates for common responses * Setting up automated ticket routing and tagging * Building support team dashboards * Training support staff on technical tools ## Building Your Brand Protection Team You don't need all of these roles to get started. Start with the knowledge owners and threat reporters, then expand to technical implementation as your program matures. ### Minimum Viable Team For most organizations, start with: One C-suite or senior leader to champion the program Someone who knows all official brand assets A security team member to handle technical threats Someone to coordinate community reporting ### Scaling Your Team As your program grows, add: Full-time role for threat monitoring and response Developer time for custom integrations Train support team on security reporting Communications team for public incidents *** Schedule a consultation to discuss the right team structure for your organization