◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY
/
/writing

Ideas & Insights.

Long-form posts and short LinkedIn notes — Tomás's thinking on cybersecurity, AI governance, board-level risk, and leadership.

Benchmarking Your Security Program

Benchmarking answers a simple but critical question: is our program where it needs to be, relative to the risk and the peers we compare to?

Up to speed on PCI DSS changes that went into effect

Up to speed on PCI DSS changes that went into effect? If not, take a quick read of this primer. What do you think is the most "controversial" change or challenge with the new version?" "#PCIDSS #ad #cybersecurity

#InfoSec tip of the day – Cybersecurity Metrics and Reporting:”

#InfoSec tip of the day - Cybersecurity Metrics and Reporting:" "Effective cybersecurity management requires clear metrics and regular reporting to inform decision-making and track progress. Boards should emphasize the importance of establishing key performance indicators (KPIs) and key risk indicators (KRIs) related to cybersecurity. These metrics can include, for example,…

AI in Cybersecurity

The use of artificial intelligence (AI) in cybersecurity offers significant advantages in detecting and responding to cyber threats more efficiently.

#InfoSec tip of the day – AI in Cybersecurity:”

#InfoSec tip of the day - AI in Cybersecurity:" "The use of artificial intelligence (AI) in cybersecurity offers significant advantages in detecting and responding to cyber threats more efficiently. Boards should advocate for the integration of AI technologies to enhance threat detection capabilities, automate response actions, and analyze vast amounts…

Happy April Fools Day!

Did you hear about the new voice-activated security software? It unlocks your data when you shout 'I've been hacked' three times in front of a mirror.

#InfoSec tip of the day – Happy April Fools Day

#InfoSec tip of the day - Happy April Fools Day!:" "Did you hear about the new voice-activated security software? It unlocks your data when you shout 'I've been hacked' three times in front of a mirror. Just kidding! The real security tip? Use strong, unique passwords for each of your…

Cyber Risk Appetite

Defining your organization's cyber risk appetite is a foundational exercise. Without it, every security decision is relative to nothing.