Long-form posts and short LinkedIn notes — Tomás's thinking on cybersecurity, AI governance, board-level risk, and leadership.
#InfoSec tip of the day - Cyber Risk Appetite:" "Understanding and clearly defining the organization's tolerance for cyber risk is essential for informed decision-making. Boards should work with senior management to develop/understand cyber risk appetite, and outline acceptable levels of risk in the context of the organization's strategic objectives and…
Having a reliable backup and recovery plan is a critical component of an organization's cybersecurity strategy.
Backup and Recovery: * Regularly back up your important data and files. * Use a cloud-based backup service, an external hard drive, or local NAS.
#InfoSec tip of the day - Regularly Test Backup and Recovery Plans:" "Having a reliable backup and recovery plan is a critical component of an organization's cybersecurity strategy. Ensure that backup systems are not only in place but are also regularly tested to guarantee they work as expected in the…
Staying compliant with evolving data privacy laws and regulations is crucial for maintaining trust and avoiding legal penalties.
#InfoSec tip of the day - Ensure Compliance with Data Privacy Laws:" "Staying compliant with evolving data privacy laws and regulations is crucial for maintaining trust and avoiding legal penalties. Boards should oversee that their organizations not only comply with applicable privacy laws like GDPR, CCPA, and others but also…
Shadow IT refers to IT systems or software used within organizations without explicit approval.
#InfoSec tip of the day - Manage Shadow IT Risks:" "Shadow IT refers to IT systems or software used within organizations without explicit approval. While it can drive innovation, it also introduces significant security risks due to the lack of oversight and compliance. Develop policies that allow for flexibility and…
While cyber threats often take the spotlight, physical security breaches can also lead to significant information security risks.
#InfoSec tip of the day - Enhance Physical Security Measures:" "While cyber threats often take the spotlight, physical security breaches can also lead to significant information security risks. Unauthorized physical access to facilities, hardware theft, and tampering can compromise digital security. Boards should ensure that physical security measures, such as…