◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY
/
/writing

Ideas & Insights.

Long-form posts and short LinkedIn notes — Tomás's thinking on cybersecurity, AI governance, board-level risk, and leadership.

Device Security:

Device Security: Keep your devices in a secure location when not in use and don't leave your devices unattended in public places.

Device Security:

Device Security: Use a security solution to protect your devices from malware. Basic security solutions, such as antivirus software, or more advanced detection & response…

#InfoSec tip of the day – “IoT Device Security”:”

#InfoSec tip of the day - "IoT Device Security":" "Ensure robust security measures are in place for Internet of Things (IoT) devices used within your organization. This includes regularly updating firmware, implementing strong authentication mechanisms, and segregating IoT networks from critical systems to minimize potential attack surfaces. Just spent a…

#InfoSec tip of the day – “Cyber Insurance Considerations”:”

#InfoSec tip of the day - "Cyber Insurance Considerations":" "Evaluate and understand your organization's cyber insurance coverage comprehensively. Ensure it covers not only direct financial losses from cyber incidents but also expenses related to regulatory fines, legal fees, and reputational damage. Regularly review and update your policy to align with…

“IoT Device Security”

Ensure robust security measures are in place for Internet of Things (IoT) devices used within your organization.

“Cyber Insurance Considerations”

Evaluate and understand your organization's cyber insurance coverage comprehensively. Ensure it covers not only direct financial losses from cyber incidents but also expenses…

#InfoSec tip of the day – Implement Container Security Best Practices:”

#InfoSec tip of the day - Implement Container Security Best Practices:" "As organizations increasingly adopt containerized applications, it's important to implement container security practices. Start by using hardened container images from trusted sources and regularly updating them to patch known vulnerabilities. Additionally, enforce least privilege principles for container permissions and…

Code Resilience & AppSec

A few months ago I was interviewed by Cycode to share my thoughts on the future of code resilience and application security.

Application Security

When using applications on your device, ensure that they are updated regularly to ensure they are running the latest security patches.