◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY
/
/writing

Ideas & Insights.

Long-form posts and short LinkedIn notes — Tomás's thinking on cybersecurity, AI governance, board-level risk, and leadership.

Secure Development Lifecycle

Integrate cybersecurity practices into your software development lifecycle. By embedding security from the initial design to deployment, you reduce vulnerabilities and ensure a…

#InfoSec tip of the day – Secure Development Lifecycle:”

#InfoSec tip of the day - Secure Development Lifecycle:" "Integrate cybersecurity practices into your software development lifecycle. By embedding security from the initial design to deployment, you reduce vulnerabilities and ensure a robust defense against potential threats." "#cybertips #cybersecurity #securityawareness

Data Retention Policies

Regularly review and update data retention policies. Holding onto data longer than necessary increases the potential risk exposure, and ensuring its safe disposal can mitigate…

#InfoSec tip of the day – Data Retention Policies:”

#InfoSec tip of the day - Data Retention Policies:" "Regularly review and update data retention policies. Holding onto data longer than necessary increases the potential risk exposure, and ensuring its safe disposal can mitigate threats and align with regulatory compliance." "#cybertips #cybersecurity #securityawareness

timely intel sharing

As we remember those we lost on this day several years ago, I’d like to highlight the importance of threat intel sharing.

#InfoSec tip of the day – timely intel sharing:”

#InfoSec tip of the day - timely intel sharing:" "As we remember those we lost on this day several years ago, I’d like to highlight the importance of threat intel sharing. Ensure you’re working with law enforcement, industry specific iSAC’s, and have invested in curated threat intelligence for your organization.…

#InfoSec tip of the day – Feedback Loop:”

#InfoSec tip of the day - Feedback Loop:" "Encourage employees to report potential cybersecurity concerns or anomalies they encounter. An internal feedback loop can quickly flag potential issues, enabling timely responses in line with reporting requirements." "#cybertips #cybersecurity #securityawareness

Cloud Security

If leveraging cloud solutions, ensure you understand shared responsibility models. While providers ensure infrastructure security, data and access management often rest with the…

Feedback Loop

Encourage employees to report potential cybersecurity concerns or anomalies they encounter. An internal feedback loop can quickly flag potential issues, enabling timely responses…

Engaging External Experts

Consider periodic consultations with external cybersecurity experts. Their fresh perspective can identify unseen vulnerabilities and help ensure that your strategies align with…