◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY
/
/writing

Ideas & Insights.

Long-form posts and short LinkedIn notes — Tomás's thinking on cybersecurity, AI governance, board-level risk, and leadership.

Prioritize Risk Assessment

Effective cybersecurity starts with a comprehensive risk assessment. For board members, it's essential to ensure that your organization continuously evaluates its digital assets,…

#InfoSec tip of the day – Prioritize Risk Assessment:”

#InfoSec tip of the day - Prioritize Risk Assessment:" "Effective cybersecurity starts with a comprehensive risk assessment. For board members, it's essential to ensure that your organization continuously evaluates its digital assets, identifies potential vulnerabilities, and assesses the impact of possible cyber threats. This proactive approach allows for the strategic…

Secure Your Playbook

Just as a football team protects its playbook, ensure your sensitive information and access credentials are encrypted and only accessible to authorized team members.

#InfoSec Tip of the Day – Secure Your Playbook:”

#InfoSec Tip of the Day - Secure Your Playbook:" "Just as a football team protects its playbook, ensure your sensitive information and access credentials are encrypted and only accessible to authorized team members. Use multi-factor authentication and regular audits to keep your defensive strategies a secret from adversaries." "#DataProtection #Encryption…

Cybersecurity Play Review

After any cybersecurity incident, conduct a thorough review similar to a football team analyzing game tape.

#InfoSec Tip of the Day – Cybersecurity Play Review:”

#InfoSec Tip of the Day - Cybersecurity Play Review:" "After any cybersecurity incident, conduct a thorough review similar to a football team analyzing game tape. Understand how the 'opposition' breached your defenses, adjust your strategies accordingly, and train your 'players' to better respond to future threats." "#CybersecurityReview #IncidentResponse #ContinuousImprovement

Cybersecurity Framework Adoption

Adopt and tailor a recognized cybersecurity framework (such as NIST, ISO/IEC 27001, etc.) to fit your organization's specific needs.

#InfoSec tip of the day – Cybersecurity Framework Adoption:”

#InfoSec tip of the day - Cybersecurity Framework Adoption:" "Adopt and tailor a recognized cybersecurity framework (such as NIST, ISO/IEC 27001, etc.) to fit your organization's specific needs. This provides a structured approach to managing cybersecurity risks, akin to having a playbook that guides the team through various game scenarios."…

Interesting read sharing some of the complexities cyber pros face as they…

Interesting read sharing some of the complexities cyber pros face as they work on securing the healthcare industry. Unlike when your credit card is stolen where you can change the card numbers. When your personal health data is taken you can be targeted for years. Just think about all those…

Cyber Literacy for All

Boosting cyber literacy across the board is key. It’s not just an IT issue; it's a boardroom imperative.