◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY
/
/writing

Ideas & Insights.

Long-form posts and short LinkedIn notes — Tomás's thinking on cybersecurity, AI governance, board-level risk, and leadership.

#InfoSec tip of the day – Secure APIs:”

#InfoSec tip of the day - Secure APIs:" "If your organization uses or develops APIs, ensure they're designed with security in mind. Proper authentication, rate limiting, and data validation can prevent potential exploits." "#cybertips #cybersecurity #securityawareness

Virtualization Safeguards

When using virtual environments, ensure isolation between virtual machines. This can prevent a compromise on one virtual system from affecting others in the same environment.

#InfoSec tip of the day – Virtualization Safeguards:”

#InfoSec tip of the day - Virtualization Safeguards:" "When using virtual environments, ensure isolation between virtual machines. This can prevent a compromise on one virtual system from affecting others in the same environment." "#cybertips #cybersecurity #securityawareness

Helpdesk security

Ensure your IT Helpdesk are equipped with effective tools and process to verify user identity before resetting accounts or assisting with access to to systems.

#InfoSec tip of the day – Helpdesk security:”

#InfoSec tip of the day - Helpdesk security:" "Ensure your IT Helpdesk are equipped with effective tools and process to verify user identity before resetting accounts or assisting with access to to systems. With ease of deepfakes (video/audio), training these frontline teams is critical." "#cybertips #cybersecurity #securityawareness

Secure APIs

If your organization uses or develops APIs, ensure they're designed with security in mind. Proper authentication, rate limiting, and data validation can prevent potential exploits.

#InfoSec tip of the day – Security Policies:”

#InfoSec tip of the day - Security Policies:" "Keep your cybersecurity policies and procedures up-to-date. As the cybersecurity threat landscape evolves, you should update your cybersecurity policies and procedures accordingly. This will help to ensure that your program is effective in mitigating the latest threats." "#cybertips #cybersecurity #securityawareness

Secure Configurations

Regularly review and update configurations of servers, databases, and applications. Default settings can often be insecure, so tailoring configurations to your organization's…

#InfoSec tip of the day – Secure Configurations:”

#InfoSec tip of the day - Secure Configurations:" "Regularly review and update configurations of servers, databases, and applications. Default settings can often be insecure, so tailoring configurations to your organization's needs enhances security." "#cybertips #cybersecurity #securityawareness