About me

I am a Computer Engineer and have a Master´s degree in information Security. I have over 8 years of experience implementing information security management systems, developing cybersecurity risk management and compliance assessments. I also have experience conducting the implementation of activities to protect personal identifiable information in accordance with legal requirements. I have worked developing Business Continuity Plans in large organizations with a national presence.

I participate in federal elections in Mexico as a Head of Risk Analysis in which I designed strategies to protect IT infrastructures and systems those are used for large processes throughout the country and leading multidisciplinary teams to achieve the objectives established. As a result, I was recognized by the president of the institution.

On the other hand, I have led projects for many companies as an Independent Consultant. Some of these projects involved defining information security governance and implementing Zero Trust Technologies, Audit finding remediations and deploying awareness campaigns to prevent security breaches.

Experience

I am a person who loves his career. I am a passionate for security information and for working with people of many different backgrounds. Throughout my life I have discovered that, in addition to director boards and documented processes, the touch with people of all levels in an organization is the key to understanding in a real manner the challenges that an organization experiment.

How can I support your organization?

Risk Management

In most cases, many companies or independent professionals conduct risk assessments to determine IT vulnerabilities or weaknesses in their information treatment activities. However, the next step for making it useful is the integration of organizational governance.

Compliance

Analyzing environmental regulations is a complex task. Once requirements have been defined, the next step is to implement all the measures and gather evidence to demonstrate the company´s compliance. When a regulation involves information security activities, simply presenting screenshots of the controls is not enough; It is necessary to enable accountability for this task.

Awareness and Training

The first line of defense are your employees and any other collaborator. Attend the first precursors prevent big incidents.

Protection of Personal Data

The are many frameworks, laws, best practices, international agreements signed by countries, in other words, many regulations that could be applicable to you according to your business. Comply with those are essential to evade sanctions, breach contract, autoregulation, even as a competitive advantage. In most cases, companies assign this task to compliance officers, but the complexity of cybersecurity is overlooked.

Information Security Management

Information security management involves ongoing, structured and controlled activities to conduct the roles, responsibilities, authorities, policies and controls necessaries to protect the organization´s assets, inform director boards and stake holders, and enable adjustments to be made for continuous improvement.

Incident Management

When an information security incident occurs, all preparations must be put in action. Organizations usually have some plans, backups and another measures in place for contain the impact of propagation of the malicious activity. However, good plans, playbooks, tested backups, restoration tools are essential, but all of them could become useless and/or expensive if we don´t know what protect.

Cybersecurity

Adopting schemes to protect your IT environment by defining a perimeter within your organization it is not enough these times. We all miss the good old days, but if we think about new technologies and work patterns, we must adopt new, flexible and adaptative frameworks.

Protect your business by securing your information

Click below and obtain a free counseling session