◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY
/
/writing

Ideas & Insights.

Long-form posts and short LinkedIn notes — Tomás's thinking on cybersecurity, AI governance, board-level risk, and leadership.

Invest in Threat Hunting

Threat hunting is a proactive approach to cybersecurity that involves actively searching for signs of malicious activity within an organization's network.

#InfoSec tip of the day – Invest in Threat Hunting:”

#InfoSec tip of the day - Invest in Threat Hunting:" "Threat hunting is a proactive approach to cybersecurity that involves actively searching for signs of malicious activity within an organization's network. Boards should prioritize investments in threat hunting capabilities, which may include dedicated threat hunting teams, advanced analytics tools, and…

Secure Remote Collaboration Tools

With our shift to remote work, the use of collaboration tools has surged, making them potential targets for cyber attacks.

#InfoSec tip of the day – Secure Remote Collaboration Tools:”

#InfoSec tip of the day - Secure Remote Collaboration Tools:" "With our shift to remote work, the use of collaboration tools has surged, making them potential targets for cyber attacks. Boards should ensure that remote collaboration tools, such as video conferencing platforms and file-sharing applications, are securely configured and regularly…

To my network, if you’re headed to RSA this year, please connect with…

To my network, if you’re headed to RSA this year, please connect with Jessica Gulick and find out how you can get involved and support the great work being done with US Cyber Games. Whether it’s tapping into the tremendous talent pipeline or sponsoring the event, etc. it’s definitely worth…

Secure Cloud Environments

As organizations increasingly adopt cloud services, securing cloud environments is essential to protect sensitive data and assets.

#InfoSec tip of the day – Secure Cloud Environments:”

#InfoSec tip of the day - Secure Cloud Environments:" "As organizations increasingly adopt cloud services, securing cloud environments is essential to protect sensitive data and assets. Boards should ensure that their organizations implement security measures for cloud environments, including strong access controls, encryption of data in transit and at rest,…

Enforce Least Privilege Access

Implementing the principle of least privilege ensures that users are granted only the minimum level of access necessary to perform their job functions.

#InfoSec tip of the day – Enforce Least Privilege Access:”

#InfoSec tip of the day - Enforce Least Privilege Access:" "Implementing the principle of least privilege ensures that users are granted only the minimum level of access necessary to perform their job functions. By limiting user access rights to only what is required for their specific roles, organizations can minimize…

Regularly Patch and Update Software

Ensuring that all software, including operating systems, applications, and firmware, is kept up-to-date with the latest patches and security updates is critical for preventing…