Long-form posts and short LinkedIn notes — Tomás's thinking on cybersecurity, AI governance, board-level risk, and leadership.
Mythos: Board Implications - What This Means Now The shift we are seeing with AI is not theoretical. It is already changing how organizations approach technology risk, investment, and resilience. Cyber risk is no longer just about prevention. It is becoming a speed and resilience problem. The time between vulnerability…
What Stood Out to Me at RSA" Spent time at RSA this past week, including ESAF, Cyber Council, and a number of side conversations. A lot of great discussion, but a few themes stayed with me. Agentic AI is moving fast. The conversation is no longer about what it can…
Honored and deeply grateful." "Being inducted into the 2026 CSO Hall of Fame is something I never imagined when I started my journey. Moments like this mean more than words in a short post could ever fully express." "This recognition is not about one person. Cybersecurity has always been a…
Start With the Why" "One lesson that has stayed with me over the years is the importance of starting with the why." "It was refreshing to hear a leader reference this during a committee meeting last week. In the middle of discussing priorities and next steps, they paused and reminded…
Burnout Is Not Always Visible" "This past week I was talking with a colleague who decided it was time to move on. One of the reasons they shared was simple: they did not want to get burned out." "That comment stuck with me." "Many of the people closest to burnout…
Culture Determines AI Outcomes" "Two organizations can deploy the same AI tool and get very different results." "Why?" "Because AI does not operate in a vacuum. It operates inside culture." "If a culture prioritizes speed over scrutiny, AI will amplify speed." "If a culture values discipline and oversight, AI will…
Agentic AI Is Stress Testing Identity and Access Management" "Last week I had a great discussion about agentic AI, and we were really just scratching the surface. I wanted to continue that conversation here because it is necessary as companies continue to move fast with the tech." "Traditional identity and…
That is often the moment when leadership presence matters most.
Borrowed Confidence" "There are moments when teams do not need more analysis. They need confidence." "I have seen it in high pressure situations when information is incomplete and the room gets quiet. Eyes shift. Questions slow down. That is often the moment when leadership presence matters most." "Sometimes the most…
I have learned that some of the heaviest decisions are the ones no one ever asks you about, but you carry them just the same.