Cybersecurity Fundamentals for Startups

Led by Javier Figueroa, Director of Cybersecurity at M.A. Polce, to help attendees gain a practical understanding of how to implement effective cybersecurity hygiene, introduce essential policies without creating administrative burden and address foundational risks across vendors and cloud environments.

The workshop is also focused on the direct alignment to cyber insurance readiness. As insurers continue to tighten underwriting standards, startups are increasingly being evaluated on their ability to demonstrate baseline controls, such as access management, endpoint protection, incident response preparedness and vendor oversight. This session will break down what insurers are actually looking for, how those expectations translate into day-to-day practices, and how proactive implementation of these fundamentals can positively influence insurability, coverage terms and premium costs.

Attendees will leave with a clear plan for strengthening their cybersecurity posture in a way that is practical, scalable and aligned to business growth and insurance requirements.

About the Speaker:

Javier Figueroa, Director of Cybersecurity at M.A. Polce

Figueroa brings extensive field experience and firsthand insights from working directly with organizations navigating security gaps, insurance requirements and operational constraints. Javier Figueroa is a seasoned cybersecurity leader with over 15 years of experience in information technology and security program management. As a Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Cloud Security Professional (CCSP), and Certified Information Privacy Manager (CIPM), Javier serves as Director of Cybersecurity at M.A. Polce, helping organizations strengthen and mature their security posture through practical, risk-driven leadership. His expertise spans vCISO advisory services, risk analysis, security roadmap development, policy and governance design, and incident readiness tabletop exercises, enabling clients to align cybersecurity strategy with business objectives and regulatory requirements.