Strengthen Insider Threat Programs
Insider threats can be as damaging as attacks from external sources. Boards should ensure their organizations have robust insider threat programs that include continuous…
Long-form posts and short LinkedIn notes — Tomás's thinking on cybersecurity, AI governance, board-level risk, and leadership.
Insider threats can be as damaging as attacks from external sources. Boards should ensure their organizations have robust insider threat programs that include continuous…
#InfoSec tip of the day - Strengthen Insider Threat Programs:" "Insider threats can be as damaging as attacks from external sources. Boards should ensure their organizations have robust insider threat programs that include continuous monitoring of user activities, regular security training, and psychological assessments where appropriate. Such programs should also…
Did you miss our conversation with Warren Small at our last Fireside Chat? Take a listen to the replay via https://lnkd.in/evfhf6ya " "#originstory #firesidechat #leadership
Effective data governance is critical for protecting sensitive information and ensuring it is used responsibly.
#InfoSec tip of the day - Advocate for Strong Data Governance:" "Effective data governance is critical for protecting sensitive information and ensuring it is used responsibly. Boards should advocate for strong data governance frameworks that classify data based on sensitivity, regulate access controls, and ensure compliance with data protection regulations.…
Creating a dedicated committee focused on cybersecurity governance can enhance oversight and strategic direction.
#InfoSec tip of the day - Establish a Cybersecurity Governance Committee:" "Creating a dedicated committee focused on cybersecurity governance can enhance oversight and strategic direction. Consider establishing a cybersecurity governance committee comprised of board members, senior management, and cybersecurity experts. This committee is responsible for reviewing cybersecurity policies, strategies, and…
Critical infrastructure, from power grids and sports leagues to financial systems, requires heightened security due to its importance to societal and economic functions.
#InfoSec tip of the day - Prioritize the Security of Critical Infrastructure:" "Critical infrastructure, from power grids and sports leagues to financial systems, requires heightened security due to its importance to societal and economic functions. Boards should ensure that their organizations prioritize the security of systems deemed critical infrastructure, implementing…
#InfoSec tip of the day - Establish a Cybersecurity Benchmarking Process:" "Comparing your organization's cybersecurity practices against industry standards and peers can provide valuable insights into your security posture. Boards should advocate for a benchmarking process that evaluates the organization's cybersecurity measures against recognized frameworks, such as NIST Cybersecurity Framework…