About Carlos Morales

THE AUTHOR

Carlos Morales

MBA | C|CISO | CISM | CRISC | CDPSE | ISO/IEC 42001 SLI

Carlos Morales is a cybersecurity executive, author, and educator with more than 20 years of experience across information security, technology risk, privacy, compliance, and operational resilience. He has led cybersecurity and risk functions in multinational, highly regulated, and operationally complex environments, spanning enterprise technology and operational technology.

From startups to global enterprises, Carlos has built and transformed cybersecurity teams, governance structures, and risk management programs that connect security with business priorities. He works with executive leaders and business functions to translate complex cyber risks into decisions about strategy, investment, resilience, and accountability.

His pragmatic approach centres on the decisions, dependencies, and business outcomes that cyber risk affects. He believes effective cybersecurity requires clear ownership, sound governance, and leaders prepared to make difficult decisions under uncertainty.

Carlos contributed from the private sector to the development of Mexico’s National Cybersecurity Plan, an initiative led by the Executive Office of the President of Mexico. He was also a member of the first Cybersecurity Innovation Council organized by the Organization of American States.

At Tecnológico de Monterrey, Carlos contributed to the development of the Cybersecurity HUB and the master’s degree in cybersecurity. He continues to teach as a Professor of Practice, helping current and future leaders connect cybersecurity with business judgment, governance, and real-world decision-making.

Carlos is the author of Cyber Risk Management in Practice: A Guide to Real-World Solutions and co-author, with Rick Doten, of Adaptive Cybersecurity Leadership, forthcoming on February 4, 2027. Across his professional and academic work, he encourages leaders to approach cybersecurity with curiosity, clarity, and a willingness to take responsibility before certainty arrives.