◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY
/
/writing

Ideas & Insights.

Long-form posts and short LinkedIn notes — Tomás's thinking on cybersecurity, AI governance, board-level risk, and leadership.

Investor Relations

Be transparent with investors. Investors need to be able to trust that you are taking cybersecurity seriously.

#InfoSec tip of the day – Investor Relations:”

#InfoSec tip of the day - Investor Relations:" "Be transparent with investors. Investors need to be able to trust that you are taking cybersecurity seriously. Be transparent with them about your risks, incidents, and the steps you are taking to address them." "#cybertips #cybersecurity #securityawareness

Crisis communication

Have a plan for communicating with the media. If your company experiences a cybersecurity incident, you will need to communicate with the media.

#InfoSec tip of the day – Crisis communication:”

#InfoSec tip of the day - Crisis communication:" "Have a plan for communicating with the media. If your company experiences a cybersecurity incident, you will need to communicate with the media. Having a plan in place will help you to ensure that you communicate effectively and minimize the damage to…

#InfoSec tip of the day – Cloud Security:”

#InfoSec tip of the day - Cloud Security:" "If leveraging cloud solutions, ensure you understand shared responsibility models. While providers ensure infrastructure security, data and access management often rest with the user. Proper configurations are paramount to prevent breaches." "#cybertips #cybersecurity #securityawareness #cloudsecurity

#InfoSec tip of the day – Endpoint Protection:”

#InfoSec tip of the day - Endpoint Protection:" "Enhance endpoint security measures, especially for remote workers. Ensuring that all endpoints are secure, irrespective of their location, reduces potential entry points for threats and aligns with a comprehensive security strategy." "#cybertips #cybersecurity #securityawareness

Third-party Assessments

Periodically engage third-party firms for cybersecurity assessments. An external review can provide unbiased insights and highlight areas for improvement, ensuring comprehensive…

#InfoSec tip of the day – Third-party Assessments:”

#InfoSec tip of the day - Third-party Assessments:" "Periodically engage third-party firms for cybersecurity assessments. An external review can provide unbiased insights and highlight areas for improvement, ensuring comprehensive security and compliance." "#cybertips #cybersecurity #securityawareness

Insider Threat Monitoring

Implement measures to monitor and mitigate potential insider threats. Employees can unintentionally or maliciously pose risks.

#InfoSec tip of the day – Insider Threat Monitoring:”

#InfoSec tip of the day - Insider Threat Monitoring:" "Implement measures to monitor and mitigate potential insider threats. Employees can unintentionally or maliciously pose risks. Proactive monitoring ensures timely detection and response." "#cybertips #cybersecurity #securityawareness