Long-form posts and short LinkedIn notes — Tomás's thinking on cybersecurity, AI governance, board-level risk, and leadership.
Honored to join the board of Hispanic Security Executive Council (HiSEC) alongside Roberto Armenteros, Yonesy Núñez, Robert Rodriguez, John Cadavid, and Joe Bernik. " "Our mission is to empower Latinx and Hispanic professionals in cybersecurity through the HiSEC" "HiSEC is committed to breaking down barriers, advocating for representation, and fostering…
When entering into contracts with third-party vendors, ensure that privacy obligations are clearly defined.
#Privacy tip of the day - Prioritize Privacy in Vendor Contracts:" "When entering into contracts with third-party vendors, ensure that privacy obligations are clearly defined. Set expectations around data handling, security measures, and compliance with privacy regulations to mitigate the risks associated with outsourcing." "#cybertips #cybersecurity #privacyawareness
Establish a governance structure to manage privacy risks at the organizational level. Create clear privacy policies, roles, and responsibilities to ensure that everyone—from…
#Privacy tip of the day - Governing Privacy Risk Through Policies:" "Establish a governance structure to manage privacy risks at the organizational level. Create clear privacy policies, roles, and responsibilities to ensure that everyone—from executives to technical staff—understands how privacy is prioritized and managed, reducing ambiguity and risk." "#cybertips #cybersecurity…
Integrate privacy considerations into the system development life cycle (SDLC) from the outset.
#Privacy tip of the day - Integrating Privacy into System Design:" "Integrate privacy considerations into the system development life cycle (SDLC) from the outset. By aligning your privacy goals with system design, you can ensure that data protection measures are built-in rather than bolted on later, making it easier to…
Ensure that privacy risks are assessed throughout the entire data lifecycle—from collection to disposal.
Practice data minimization principles by only collecting and retaining the necessary data for business needs.
#Privacy tip of the day - Privacy Risk in Data Lifecycle:" "Ensure that privacy risks are assessed throughout the entire data lifecycle—from collection to disposal. It’s not enough to focus on data security during storage or transmission; data minimization and user consent must be considered during every stage to reduce…