◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY
/
/writing

Ideas & Insights.

Long-form posts and short LinkedIn notes — Tomás's thinking on cybersecurity, AI governance, board-level risk, and leadership.

Strengthen Insider Threat Programs

Insider threats can be as damaging as attacks from external sources. Boards should ensure their organizations have robust insider threat programs that include continuous…

#InfoSec tip of the day – Strengthen Insider Threat Programs:”

#InfoSec tip of the day - Strengthen Insider Threat Programs:" "Insider threats can be as damaging as attacks from external sources. Boards should ensure their organizations have robust insider threat programs that include continuous monitoring of user activities, regular security training, and psychological assessments where appropriate. Such programs should also…

#InfoSec tip of the day – Advocate for Strong Data Governance:”

#InfoSec tip of the day - Advocate for Strong Data Governance:" "Effective data governance is critical for protecting sensitive information and ensuring it is used responsibly. Boards should advocate for strong data governance frameworks that classify data based on sensitivity, regulate access controls, and ensure compliance with data protection regulations.…

#InfoSec tip of the day – Establish a Cybersecurity Governance Committee:”

#InfoSec tip of the day - Establish a Cybersecurity Governance Committee:" "Creating a dedicated committee focused on cybersecurity governance can enhance oversight and strategic direction. Consider establishing a cybersecurity governance committee comprised of board members, senior management, and cybersecurity experts. This committee is responsible for reviewing cybersecurity policies, strategies, and…

#InfoSec tip of the day – Prioritize the Security of Critical Infrastructure:”

#InfoSec tip of the day - Prioritize the Security of Critical Infrastructure:" "Critical infrastructure, from power grids and sports leagues to financial systems, requires heightened security due to its importance to societal and economic functions. Boards should ensure that their organizations prioritize the security of systems deemed critical infrastructure, implementing…

#InfoSec tip of the day – Establish a Cybersecurity Benchmarking Process:”

#InfoSec tip of the day - Establish a Cybersecurity Benchmarking Process:" "Comparing your organization's cybersecurity practices against industry standards and peers can provide valuable insights into your security posture. Boards should advocate for a benchmarking process that evaluates the organization's cybersecurity measures against recognized frameworks, such as NIST Cybersecurity Framework…