Long-form posts and short LinkedIn notes — Tomás's thinking on cybersecurity, AI governance, board-level risk, and leadership.
#InfoSec tip of the day - Timely Cyber Incident Reporting:" "With the SEC's 2023 rules, companies must promptly determine the materiality of a cybersecurity incident. Pre-established criteria and communication channels will be essential to making timely disclosures, especially given the four-business-day window for Form 8-K submissions after deeming an incident…
In light of the SEC's new regulations, it's vital to incorporate cyber risk considerations into your corporate governance structure.
#InfoSec tip of the day - Cyber Risk Governance:" "In light of the SEC's new regulations, it's vital to incorporate cyber risk considerations into your corporate governance structure. Ensure your board of directors actively oversees cybersecurity threats and that the management's role in assessing and managing these risks is clearly…
Encourage the adoption of cyber risk reporting in board meetings. Understanding the cyber risks faced by the company can help to guide strategy and ensure appropriate resources…
#InfoSec tip of the day - Cyber Risk Reporting:" "Encourage the adoption of cyber risk reporting in board meetings. Understanding the cyber risks faced by the company can help to guide strategy and ensure appropriate resources are allocated to cyber defense." "#cybertips #cybersecurity #securityawareness
Data sanitization is the process of completely eradicating data from storage media. Before disposing of, selling, or reusing any storage devices, make sure that data has been…
#InfoSec tip of the day - Data Sanitization:" "Data sanitization is the process of completely eradicating data from storage media. Before disposing of, selling, or reusing any storage devices, make sure that data has been properly sanitized to prevent unauthorized access or data breaches." "#cybertips #cybersecurity #securityawareness
Before entering into contracts with vendors or third parties, ensure there are proper cybersecurity standards, controls, and audits in place.
#InfoSec tip of the day - Third-Party Risk Management:" "Before entering into contracts with vendors or third parties, ensure there are proper cybersecurity standards, controls, and audits in place. Your organization's security is only as strong as the weakest link in your supply chain." "#cybertips #cybersecurity #securityawareness
In football, a strong offense is essential for gaining ground and scoring points. Similarly, in cybersecurity, practice a proactive cyber offense to mitigate risks.