Long-form posts and short LinkedIn notes — Tomás's thinking on cybersecurity, AI governance, board-level risk, and leadership.
#InfoSec tip of the day - Vendor and Supply Chain Oversight:" "Given the interconnected nature of businesses, ensure your vendors and supply chain partners align with your cybersecurity standards. A breach in their systems could affect your disclosure obligations." "#cybertips #cybersecurity #securityawareness
Equip your board members with regular training on emerging cybersecurity threats and best practices.
#InfoSec tip of the day - Cybersecurity Training for Boards:" "Equip your board members with regular training on emerging cybersecurity threats and best practices. Their informed oversight ensures strategic alignment with the evolving cybersecurity landscape." "#cybertips #cybersecurity #securityawareness
Be prepared for potential delays in disclosing material cybersecurity incidents if the U.S. Attorney General determines it poses a substantial risk to national security.
#InfoSec tip of the day - Navigating National Security Delays:" "Be prepared for potential delays in disclosing material cybersecurity incidents if the U.S. Attorney General determines it poses a substantial risk to national security. " "Establish a protocol for these situations to ensure seamless cooperation with regulatory bodies." "#cybertips #cybersecurity…
Prioritize an annual review of your cybersecurity risk management, strategy, and governance.
#InfoSec tip of the day - Annual Cyber Strategy Review:" "Prioritize an annual review of your cybersecurity risk management, strategy, and governance. This ensures alignment with SEC's Regulation S-K Item 106 and provides investors with a consistent and clear insight into the company's cyber readiness." "#cybertips #cybersecurity #securityawareness
Incorporate cybersecurity expertise within the board to ensure comprehensive oversight of cyber risks.
#InfoSec tip of the day - Board's Cyber Oversight:" "Incorporate cybersecurity expertise within the board to ensure comprehensive oversight of cyber risks. " "The SEC's emphasis on the board's role underscores the importance of top-level engagement in cybersecurity strategy and governance." "#cybertips #cybersecurity #securityawareness
With the SEC's 2023 rules, companies must promptly determine the materiality of a cybersecurity incident.