Boardroom E-9 is the crisis room of a corporate running 24/7 cybersecurity operations, with HQ in Santa Fe: 14 seats in a horseshoe, an antimicrobial and easy-sanitise table surface (clean-room protocol), a screen for video calls with SOC in Mexico, the US, or Asia, individual microphones with anti-recording system, a digital voting system with private-blockchain hash for traceability of crisis votes, an adjoining room for the CISO's meeting with the incident-response team, capacity for a 4 to 8-hour session. This is where cybersecurity committees of Mexican corporates with critical operations sit (banks, fintechs, hospitals, telcos), where tabletop exercises (TTX) for ransomware response run, where crisis committees gather for incident response, and where incident-disclosure committees meet (CNBV, Secretaría de Salud, Guardia Nacional when applicable). What defines Boardroom E-9 is not the clean room; it is the speed. The merch is delivered at the start of the committee, with identification badge and the CISO's signature.
Production of 10 to 16 units for cybersecurity-committee members, incident-response officers, and external counsel. Metal-clip folder with the fiscal year's cover, numbered notepads with the corporate's letterhead and incident number, roller pen engraved with the CISO's name, encrypted USB with the incident-response plan and the crisis runbook, card with the day's agenda and voting slate. Delivered before the committee into the locker at Boardroom E-9.
Uniforms for the incident-response team, the SOC staff, and the operations personnel at Boardroom E-9. Quick-dry technical cotton t-shirt with the corporate's crest, response-tool vest with pockets, badge with photo, name and role (CISO, SOC analyst, incident responder, external counsel), lanyard with mandatory encrypted USB. Production in technical-standard quick-dry textile, professionally pressed, delivered back-of-house 90 minutes before doors open.
Production of 1 to 3 units for the CISO ending their cycle, the cybersecurity officer with 10 years of service, or the founding incident-response lead. Wooden box with engraved plaque bearing the corporate's crest and service year, hand-bound book tracing the cybersecurity programme's timeline, fountain pen engraved with the CISO's monogram, calligraphed card with the corporate's crest. Delivered in a sealed envelope at session close or before the closing dinner.
Production of 30 to 200 units for the incident-response officers of subsidiaries receiving the updated runbook, the parent's cybersecurity officers, and the external counsel. Runbook printed on security paper with the corporate's crest watermark, encrypted USB with the digital version and advanced electronic signature, pocket notebook with runbook cover, roller pen with the corporate's logo. Production in cybersecurity-standard materials, delivered at the entrance of Boardroom E-9 before the committee.
Boardroom E-9 operates with a single load-in entry: the corporate's service entrance, which accepts a van with security escort within restricted hours (generally 7:00 to 10:00 and 17:00 to 20:00). The pedestrian load-in requires prior identification, the corporate's badge, and a signature in the runbook logbook; informal access is not allowed. The corporate's operations staff hand over POP material and the CISO kits with visible ID and badge. The back-of-house at Boardroom E-9 includes a biometric vault: the classified-documentation room, where high-value merch (runbooks, encrypted USBs, fountain pens) is kept in sealed boxes bearing the CISO's stamp. Boardroom E-9 has no visible kitchen: the corporate's cafeteria sends food through the service corridor, and table service is coordinated with the corporate's operations lead to comply with cybersecurity protocol.
For sessions with international incident-response officers (typically from the US, Israel, the UK, or India), we handle USD invoicing at the Banco de México FIX rate of the day before the event, with USMCA compliance when the corporate operates in the US, and support for deduction as cybersecurity or compliance expense in the corporate's fiscal close. For sessions with Guardia Nacional, Policía Cibernética, or CNBV officials when applicable to banks/fintechs, we comply with compliance protocol and the regulator's security protocol. The merch custody chain is documented with signature, timestamp, and photograph at every checkpoint: entry to the load-in with escort, review by the corporate's operations personnel, transfer to the vault, restocking during recesses, post-committee collection.
For corporates with IMMEX operations and critical cybersecurity, we handle complementary SAT invoicing with 16% IVA breakdown and support for deduction as cybersecurity or PR expense. For corporates in regulated sectors, we handle invoicing in compliance with the business-activities income regime for services under Mexican tax law. For corporates with US operations, we handle bilingual (es/en) invoicing and USMCA compliance when the CISO kit crosses the border as part of the hospitality kit for the officer residing abroad.
Boardroom E-9 operates under rules the merch must respect: no mobile-phone use in the room during committee votes (cybersecurity protocol), no merch with unauthorised electronic components (zero-trust principle), no backpacks or large bags in the room (clean-room protocol), no POP material with third-party logos (a frequent request from the CISOs), no food or beverages outside the corporate's cafeteria service. For sessions that require limited-edition merch (numbered anniversary t-shirt of the SOC, book signed by the founding CISO, paperweight marking the runbook year), we coordinate with the corporate's operations area to ensure the piece complies with cybersecurity protocol, runbook-confidentiality protocol, and transmission protocol (when the session is internal and is not recorded, in compliance with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares).
For sessions with media coverage (post-committee press conference, annual cybersecurity-report presentation, incident disclosure when applicable), we comply with the corporate's press protocol and the CISO's incident-disclosure protocol, with pieces carrying no third-party logos or with digital redaction when the corporate's manual requires it. For sessions with internal transmission to the corporate's subsidiaries (sessions transmitted to Mexico City, Monterrey, or Guadalajara offices), we comply with the corporate's transmission protocol with pieces visible on-screen and pieces hidden from transmission. For sessions with live transmission abroad (video call with response officers at the US or Israeli parent), we comply with time-zone rules and ship pieces to the international parent two weeks in advance.
For SAT invoicing, we issue CFDI 4.0 with 16% IVA breakdown and support for deduction as cybersecurity, compliance, or PR expense, depending on how the merch is used. For corporates with IMMEX or US operations, we handle complementary invoicing in USD or EUR with USMCA compliance when the merch crosses the border as part of the hospitality kit. The merch is delivered with carta porte 3.0 when interstate or international transit applies, with the foreign-trade complement when applicable, and with the payment complement when the corporate pays in instalments. Delivery to the vault is documented with an entry slip signed by the corporate's operations lead, the CISO, and the compliance officer.
CISO kit — from MXN $5,450 before IVA per unit in a run of 12. Response-team merch — from MXN $3,250 before IVA per person in a run of 10. Outgoing CISO recognition — from MXN $13,500 before IVA per unit in a run of 3. Crisis-runbook merch — from MXN $1,350 before IVA per unit in a run of 100. Costs exclude the Boardroom E-9 rental, which is quoted directly with the corporate's operations area depending on the day, schedule, setup, additional services (cafeteria, vault, audiovisual equipment, anti-recording system, security escort) and cybersecurity compliance.
For high-demand dates (cybersecurity committees with quarterly regulatory calendars, tabletop exercises with audit dates, crisis-response sessions with incident disclosure), we hold the calendar with 60 days' lead time and a firm written commitment. For low-demand dates, we hold with 30 days' lead time. Express production under 18 days carries a +35% surcharge for curation and dispatch. The reservation is made with a 14-point brief: committee date, session type (cybersecurity, incident response, tabletop, disclosure), attendee count, units per package, corporate brand manual, brand colour palette, corporate cybersecurity protocol, transmission compliance, load-in logistics, post-committee donation, and SAT invoicing.
Yes — we deliver the kit with an individual acknowledgement, signed by the CISO, with delivery time and the uniformed delivery staff's signature. The custody chain is documented with photography when cybersecurity protocol permits, and is held in a sealed envelope throughout the day for return at session close.
Yes — we run quarterly programming with the same brand manual, scaling the run according to the committee's agenda and special guests (international response officers, external counsel, Policía Cibernética officials). Coordination with the cybersecurity-committee secretariat for editorial curation.
Yes — we issue CFDI 4.0 to the SAT with 16% IVA breakdown and support for deduction as cybersecurity, compliance, or PR expense, depending on the merch's use. For corporates with IMMEX operations, we handle complementary invoicing in USD with the foreign-trade complement and USMCA compliance.
No. Corp-Merch.MX is an independent workshop handling curation, production and logistics of merch for cybersecurity committees, incident response, and tabletop exercises at Boardroom E-9 and other CDMX venues. Boardroom E-9 is mentioned for sector-description purposes only.
Tell us the committee date, session type, attendee count, units per package, corporate brand manual, brand colour palette (where applicable), corporate cybersecurity protocol, transmission compliance, load-in logistics, and SAT invoicing. We respond with a package-by-package quote, curation proposal, and digital mock-up within 24 to 48 business hours.
Corp-Merch.MX is an independent workshop handling curation, production and logistics of merch for cybersecurity committees, incident response, and tabletop exercises at Boardroom E-9 and other CDMX venues. We are not a partner, sponsor or official supplier of Boardroom E-9, of the corporates, or of the CISOs mentioned on this page. The figures, venues and suppliers mentioned are sector references and are cited for descriptive purposes only.