◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY
/
/writing

Ideas & Insights.

Long-form posts and short LinkedIn notes — Tomás's thinking on cybersecurity, AI governance, board-level risk, and leadership.

#InfoSec tip of the day – Secure Cloud Configurations:”

#InfoSec tip of the day - Secure Cloud Configurations:" "When using cloud services, ensure configurations are secure and in line with best practices. Misconfigured cloud services are a common source of data breaches and can be prevented with proper oversight." "#cybertips #cybersecurity #securityawareness

Business Continuity Planning

Integrate cybersecurity into your business continuity planning. Ensure that plans are in place to maintain critical operations and quickly recover in the event of a significant…

#InfoSec tip of the day – Business Continuity Planning:”

#InfoSec tip of the day - Business Continuity Planning:" "Integrate cybersecurity into your business continuity planning. Ensure that plans are in place to maintain critical operations and quickly recover in the event of a significant cyber incident." "#cybertips #cybersecurity #securityawareness

#InfoSec tip of the day – Secure Backups:”

#InfoSec tip of the day - Secure Backups:" "Ensure that backups are not only regularly performed but also securely stored, tested, and encrypted." "#cybertips #cybersecurity #securityawareness

#InfoSec tip of the day – Data Minimization:”

#InfoSec tip of the day - Data Minimization:" "Practice data minimization principles by only collecting and retaining the necessary data for business needs. Reducing stored data volume limits exposure in the event of a data breach." "#cybertips #cybersecurity #securityawareness

Encryption Management

Maintain strict control over encryption keys. Implement a robust key management system to ensure keys are protected against unauthorized access, thereby securing encrypted data.

#InfoSec tip of the day – Encryption Management:”

#InfoSec tip of the day - Encryption Management:" "Maintain strict control over encryption keys. Implement a robust key management system to ensure keys are protected against unauthorized access, thereby securing encrypted data." "#cybertips #cybersecurity #securityawareness

browser password managers

Disable the ability to use this “feature” on corporate systems to avoid synching business passwords and having them accessed from personal systems.

#InfoSec tip of the day – browser password managers”

#InfoSec tip of the day - browser password managers" "Disable the ability to use this “feature” on corporate systems to avoid synching business passwords and having them accessed from personal systems." "#cybertips #cybersecurity #securityawareness

Secure Backups

Ensure that backups are not only regularly performed but also securely stored, tested, and encrypted.