Business executives are frequent, easy, and attractive targets for cybercriminals. In this report, we explain how cybercriminals and fraudsters target business leaders and how those executives' own activities can magnify the risk and the damage. Next, we outline best practices that security and risk (S&R) teams can use to educate and protect executives against these attacks and scams.