Company
Date Published
Author
Erica Azad
Word count
1040
Language
English
Hacker News points
None

Summary

Tomás Maldonado, the CISO of the NFL, discusses his strategic approach to cybersecurity, emphasizing the alignment of security with the organization's business objectives and risk appetite. He highlights the importance of creating a unified security framework across the NFL's ecosystem, which includes 32 clubs and various media and event operations. This framework involves implementing consistent controls, shared playbooks, and regular assessments to prevent vulnerabilities. Maldonado also focuses on fostering a culture where employees are seen as security advocates through training and awareness. He stresses the significance of AI governance, integrating security into AI initiatives from the start, and ensuring compliance, privacy, and security concerns are addressed. Maldonado advocates for proactive security measures, such as offensive testing and red team drills, to build resilience and prepare for potential threats. He emphasizes that security should enable innovation rather than hinder it, and by embedding security into the organization's DNA, the NFL can advance confidently and safely.