Tomas Sjostrom

diagonal-slashes

About Tomas Sjostrom

President, Technology Services

"Too often businesses suffer from lack of action, execution, or decision-making. The key is to keep forward momentum and always look for improvements."

Biography

A professional technical leader with previous CEO, CIO, CISO, and CTO titles, Tomas has spent nearly 30 years working in IT compliance, management and cybersecurity in a wide range of industries and projects. At James Moore Technology Solutions he leads strategic planning and business development operations and supports his team as they provide more services and grow the company’s customer base.

Tomas has been on both the buying and selling sides of the equation, giving him a keen understanding of the balance between the right level of service and affordability. He measures his most memorable projects by the results achieved, whether it was untangling failing efforts in service delivery or pushing through with new technologies or ways of working.

Posts by Tomas Sjostrom

IT risk assessments range from real analytical work to repackaged scans. Here's what a legitimate assessment includes.

IT Risk Assessments Explained: What Business Owners Should Expect

By Tomas Sjostrom, CISSP | August 13, 2026
Half the “risk assessments” business owners pay for aren’t risk assessments. They’re vulnerability scans dressed up in a PDF cover, sold at a price that reflects the report length rather than the analytical work behind it. Knowing what a real IT risk assessment includes, and what a legitimate provider will deliver, is the difference between…
Read More →
Backup testing frequency depends on which test you mean. Here's how to build a cadence that actually protects you.

How Often Should You Test Your Backups? A Business Owner’s Guide

By Tomas Sjostrom, CISSP | August 12, 2026
The frequency question is the wrong place to start. Most conversations about backup testing collapse three different tests into one and end up answering none of them well. Knowing whether the backup job ran, whether the data is recoverable, and whether the business could restore operations are three separate questions with three separate answers. The…
Read More →
A managed IT services agreement lives or dies in the details. Here's what to look for in scope, SLAs and exclusions.

What Is Included in a Managed IT Services Agreement?

By Tomas Sjostrom, CISSP | July 13, 2026
Most people evaluating a managed IT services agreement flip to the pricing page first. That’s the easiest part to compare and the least useful part to read carefully. What actually determines whether the agreement will hold up is scope, service level agreements (SLAs), security specifics and exclusions, and how those four sections talk to each…
Read More →
Cyber insurance requirements now read like a security audit. Here's what underwriters expect and where claims get denied.

Cyber Insurance and Your IT Environment: What Underwriters Now Require

By Tomas Sjostrom, CISSP | July 13, 2026
Five years ago, buying cyber insurance meant filling out a short questionnaire and getting a quote a few days later. That market is gone. In its place is an underwriting process that increasingly resembles a technical audit, with financial consequences attached to every “yes” on the application. Cyber insurance requirements now shape which businesses can…
Read More →
outsource IT services vs in-house IT

Outsourced vs. In-House IT: Making the Right Choice for Your Business Stage

By Tomas Sjostrom, CISSP | June 11, 2026
The standard version of this debate compares two columns of numbers and declares a winner. The real decision isn’t about cost. It’s about what each model can actually deliver as the business grows, and where each one quietly fails. Choosing between outsourced IT services vs in-house IT means looking past salary math and asking what…
Read More →
IT cost benchmarking varies by industry and size. See current benchmarks and how to set a budget that fits your business.

How Much Should You Spend on IT? Benchmarking IT Costs for Growing Businesses

By Tomas Sjostrom, CISSP | June 9, 2026
Every fall, the same conversation happens in finance departments across the country. The CFO asks what next year’s IT budget should look like. The answer comes back as a number that’s roughly last year’s figure with a percentage added on top. Nobody in the room is sure whether that number is too high, too low…
Read More →

A professional technical leader with previous CEO, CIO, CISO, and CTO titles, Tomas has spent nearly 30 years working in IT compliance, management and cybersecurity in a wide range of industries and projects. At James Moore Technology Solutions he leads strategic planning and business development operations and supports his team as they provide more services and grow the company’s customer base.

Tomas has been on both the buying and selling sides of the equation, giving him a keen understanding of the balance between the right level of service and affordability. He measures his most memorable projects by the results achieved, whether it was untangling failing efforts in service delivery or pushing through with new technologies or ways of working.