◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY
/
/writing

Field notes.

Long-form posts and short LinkedIn notes — Tomás's thinking on cybersecurity, AI governance, board-level risk, and leadership.

Slowing down AI got me thinking

Reading about the growing debate around slowing down AI got me thinking. Here’s a “controversial” thought. If you really wanted to slow AI adoption, you’d start paying in cash again. Not because cash is magic, but because it introduces friction. That pause, that tiny “inconvenience”, is a reminder that convenience…

What a week in Melbourne.

With so much focus on how technology & Ai is changing the way we connect and experience the world. This past week was a pretty good reminder that there is still something special about bringing people together. Years of planning, countless hours of preparation, and collaboration across teams, partners, and…

Boardroom Cyber Talks: The Decisions You Can’t Delegate

Technology will continue to change. The boards responsibility for resilience, risk oversight and accountability will not. Enjoyed this conversation with David White at the Nasdaq Boardroom Cyber Talks and thanks Scott Kannry for the opportunity to share my thoughts. #boardgovernance #cyber #thoughtleadership Episode link: https://www.nasdaq.com/videos/boardroom-cyber-talks-decisions-you-cant-delegate

The line between cyber and physical security is disappearing.

AI is accelerating the convergence of the digital and physical worlds. That’s changing more than technology. It’s changing how organizations operate and how security teams need to think and work together. For years, cybersecurity and physical security operated in parallel. One focused on protecting systems. The other focused on protecting…

A Thought on AI and Deception Technology

I was recently talking with a founder about the use of deception technology in their solution. After the conversation, I found myself thinking less about detection and more about economics and attacker behavior. For years, defenders have been playing an expensive game while attackers have benefited from automation and scale.…

Forgepoint Capital Advisory Council

Honored to join the Forgepoint Capital Advisory Council alongside an incredible community of cybersecurity, AI, and technology leaders. Throughout my career, I have benefited from the guidance, perspectives, and generosity of others who were willing to share their experiences. I look forward to paying that forward by supporting founders and…

What Does Scuba Diving Have in Common with Cybersecurity?

This past week, I had the opportunity to dive alongside my son, JeanCarlo, as he earned his Open Water scuba certification in the Cayman Islands. We averaged two to three dives a day and explored some incredible sites together. We also shared the stage at the Descent Cyber Conference, where…

Shadow AI Is a Signal

For years, we talked about Shadow IT as a governance problem. In some cases, it was. But often it was a signal that employees were trying to solve a problem faster than the organization could. I think we’re seeing the same thing with Shadow AI. People are not experimenting with…