◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY
/
/writing

Ideas & Insights.

Long-form posts and short LinkedIn notes — Tomás's thinking on cybersecurity, AI governance, board-level risk, and leadership.

Foster Security Collaboration Across Industries

Cybersecurity is a shared challenge that benefits from cross-industry collaboration. Boards should encourage their organizations to participate in industry-wide cybersecurity…

#InfoSec tip of the day – Foster Security Collaboration Across Industries:”

#InfoSec tip of the day - Foster Security Collaboration Across Industries:" "Cybersecurity is a shared challenge that benefits from cross-industry collaboration. Boards should encourage their organizations to participate in industry-wide cybersecurity initiatives, sharing threat intelligence, best practices, and mitigation strategies with peers. Engaging in partnerships and alliances strengthens the cybersecurity…

Embed Security in Project Lifecycle

To effectively mitigate cybersecurity risks, security considerations must be embedded in the lifecycle of every project, from inception through deployment and beyond.

#InfoSec tip of the day – Embed Security in Project Lifecycle:”

#InfoSec tip of the day - Embed Security in Project Lifecycle:" "To effectively mitigate cybersecurity risks, security considerations must be embedded in the lifecycle of every project, from inception through deployment and beyond. Advocate for integrating security assessments, and compliance checks at key stages of project development. By doing so,…

#InfoSec tip of the day – Develop a Cyber Resilience Plan:”

#InfoSec tip of the day - Develop a Cyber Resilience Plan:" "Beyond prevention, organizations must be prepared to respond and recover from cyber incidents. Developing a cyber resilience plan involves not just defending against attacks but also ensuring that your operations can continue during and after a cyber incident. Board…

#InfoSec tip of the day – Strategize Cybersecurity Investment:”

#InfoSec tip of the day - Strategize Cybersecurity Investment:" "Strategic investment in cybersecurity is essential for protecting your organization's digital assets. Board members play a crucial role in ensuring that investments in cybersecurity are aligned with the organization's risk appetite and business objectives. It's not just about spending more; it's…

Solidify Your Cybersecurity Policy

A cybersecurity policy is the foundation of a secure organization. Board members should advocate for the development and continuous refinement of policies that address current…

#InfoSec tip of the day – Solidify Your Cybersecurity Policy:”

#InfoSec tip of the day - Solidify Your Cybersecurity Policy:" "A cybersecurity policy is the foundation of a secure organization. Board members should advocate for the development and continuous refinement of policies that address current threats and align with industry best practices. These policies should be communicated clearly throughout the…