Long-form posts and short LinkedIn notes — Tomás's thinking on cybersecurity, AI governance, board-level risk, and leadership.
Looking forward to this, thanks Cloud Security Alliance and John Yeoh for allowing me to share my thoughts at this years Ai Summit. " "#thoughtleadership #Ai #informationsecurity
Interesting article, a little dated but still interesting points worth reading. Curious what the community is thinking here.
One would think a good use of Ai would be to write secure code but if we’re training the model on code written by “humans” that will almost always have flaws then are we just continuing the problems of today? " "Interesting article, a little dated but still interesting points…
Sharing this pretty quick read & primer on Continuous Threat Exposure Management (CTEM). " "Curious though, is this on your list of priorities this year or have you been working on this already? " "#CTEMexplained #ad #cybertrends2024
This will be very interesting to keep an eye on… lets see those creative minds. #GenAi #chatgpt #storeopen
Have you been tracking the updates to NIST 2.0? Some key areas worth reviewing from the article that I'm excited to see is the Govern category and focus on Risk Management Strategy with it's aim at protecting data, reducing supply chain risk, and broadly maturing the way we manage cyber…
Joining the party with 2024 cyber predictions. I tend to agree with prediction #3 from this article. Ai will be everywhere but I’d argue it’s already everywhere and has been for a while. That said I think GenAi will continue to be the focus both for productive and malicious uses.…
Board members should ensure active oversight of cybersecurity risks. This includes understanding the company's cybersecurity risk assessment programs and how these risks are…
#InfoSec tip of the day - Cybersecurity Oversight in Governance: " "Board members should ensure active oversight of cybersecurity risks. This includes understanding the company's cybersecurity risk assessment programs and how these risks are integrated into overall risk management. It's vital to have clear reporting lines and communication processes between…
Reminder, under the new SEC rules, it's crucial for organizations to provide detailed disclosures about their cybersecurity risk management and strategy in annual reports.