◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY
/
/writing

Ideas & Insights.

Long-form posts and short LinkedIn notes — Tomás's thinking on cybersecurity, AI governance, board-level risk, and leadership.

#InfoSec tip of the day – Code Resilience & AppSec “

#InfoSec tip of the day - Code Resilience & AppSec " "A few months ago I was interviewed by Cycode to share my thoughts on the future of code resilience and application security. I’m excited to share today Cycode | Complete ASPM’s highly anticipated book, “Code Resilience in the Age…

Thanks for the great discussion Rich Delisser and Matthew Pasco

Thanks for the great discussion Rich Delisser and Matthew Pasco. Kudos to Cisco for another great Cisco Live conference and shout out to Brendan Burns, Joshua Glasheen, Garrett Einerman, Cindy Valladares, Lisa Snow and several other key members of the team that I missed. Thanks for the partnership! #ciscolive

Implement Behavioral Analytics

Consider implementing behavioral analytics solutions to detect and mitigate advanced threats that traditional security measures may miss.

#InfoSec tip of the day – Implement Behavioral Analytics:”

#InfoSec tip of the day - Implement Behavioral Analytics:" "Consider implementing behavioral analytics solutions to detect and mitigate advanced threats that traditional security measures may miss. Behavioral analytics leverage machine learning and artificial intelligence algorithms to analyze user and entity behavior across networks, endpoints, and applications. By establishing baseline behavior…

Social engineering:

Social engineering: Be cautious when interacting with unfamiliar websites or social media profiles.

#InfoSec tip of the day [reminder] – Conduct Regular Security Awareness…

#InfoSec tip of the day [reminder] - Conduct Regular Security Awareness Training:" "Regularly educate employees about cybersecurity risks and best practices through interactive training sessions and workshops. Cover topics such as phishing awareness, password hygiene, and social engineering tactics to empower employees to recognize and respond to potential threats. Encourage…

#InfoSec tip of the day – MFA/2FA”

#InfoSec tip of the day - MFA/2FA" "Enable Multi-Factor Authentication (MFA)/ Two-factor authentication (2FA) wherever possible. That’s the tip!" "#cybertips #cybersecurity #MFA

#InfoSec tip of the day – Implement a Formal Cybersecurity Risk Management…

#InfoSec tip of the day - Implement a Formal Cybersecurity Risk Management Program:" "Develop and implement a formal cybersecurity risk management program to identify, assess, and mitigate potential risks to your organization's information assets. This program should include processes for conducting risk assessments, establishing risk tolerance levels, and implementing risk…