Long-form posts and short LinkedIn notes — Tomás's thinking on cybersecurity, AI governance, board-level risk, and leadership.
This question of "Secure by Design" will be one that all security practitioners will be asking of their vendors. Therefore (vendors), take every opportunity to get engaged early because it's commercial, competitive advantage, and a business imperative to have secure products." "Those vendors that have a separate SKU to add…
Those vendors that have a separate SKU to add MFA to their products, this is directed towards you. This must be in your product by default!
Align your organization's privacy policies with the NIST Privacy Framework to ensure comprehensive privacy protection.
#Privacy Tip of the Day - Aligning with NIST Privacy Framework:" "Align your organization's privacy policies with the NIST Privacy Framework to ensure comprehensive privacy protection. By identifying, assessing, and managing privacy risks, you'll strengthen your organization's ability to safeguard sensitive information and comply with regulatory standards." "#CyberPrivacy #NISTFramework #DataProtection
When selecting vendors, assess their privacy practices just as thoroughly as their service capabilities.
#Privacy tip of the day - Privacy-First Vendor Selection:" "When selecting vendors, assess their privacy practices just as thoroughly as their service capabilities. Ensure they align with your privacy standards and are capable of meeting regulatory requirements. A single vendor's weak privacy practices can expose your company to significant risks."…
Consider automating privacy controls such as data access restrictions, anonymization, and audit logging.
#Privacy tip of the day - Automating Privacy Controls:" "Consider automating privacy controls such as data access restrictions, anonymization, and audit logging. Automation reduces the risk of human error and ensures privacy standards are consistently applied, especially as data volumes grow. This can also simplify compliance with privacy laws." "#cybertips…
Promote transparency by proactively sharing your privacy risk management practices with stakeholders, including customers and regulators.
#Privacy tip of the day - Privacy Risk Transparency:" "Promote transparency by proactively sharing your privacy risk management practices with stakeholders, including customers and regulators. This transparency demonstrates your commitment to data protection and builds trust, which can be a competitive advantage in today’s privacy-conscious market." "#cybertips #cybersecurity #privacyawareness