Juan Guillermo Carrasco Sanhueza

My role as Analyst Information Security at CMR Falabella is to ensure compliance with security policies of corporate information and identify security breaches or vulnerabilities in information system, in order to propose improvements for remediation. - Promote compliance of Security Policy Corporate Information. - Support the development of projects about Information Security and Business Continuity. - Coordinate activities associated with cryptographic components (EMV Visa/MasterCard). - Validate the use of best existing practices in Information Security and new business projects. - Support different areas about Information Security subjects in CMR Falabella. - Apply methodologies for measuring and managing risk Information Security in order to support internal control processes. - Identify the risks associated with security flaws in information systems of CMR Falabella and propose improvements to mitigate security breaches and associated risks. - Perform security analysis and / or vulnerabilities to Corporate IT infrastructure

Member of Performance & Technology Services area (ITA), specializing in the service line Information Security and Business Continuity. In information security, I am participating as a consultant performing IT security audits, SAS70 (ISAE 3402) control reviews, Web Application Penetration Testing, WPA2 Enterprise authentication deployment with Radius technology integration, security testing for Wireless Networks, SSID broadcast, signal strength, broadcast channels, review of secure encryption and authentication, WarDriving and Wireless Penetration Testing, and Identification and classification of information assets. In Business Continuity, I participated in the development of Business Continuity Plans , Contingency Plans , Disaster Recovery Plan , audits Management System Business Continuity ( BCMS ) by reference to the international standard BS25999 and ISO22301. (*) Business Continuity - Support , project management and implementation of Institutional Business Continuity (BCP , DRP , BIA) . - Application of the integral cycle Business Continuity Process and Document Management . - Reviewing and improving the Business Impact Analysis (BIA ) . - Performance Audit to BCMS by reference to the ISO 22301:2012 standard. - Consultancy Development of Contingency Plans. - Systems Implementation Business Continuity Management (BS-25999). - Systems Audit Business Continuity Management (BS-25999 / ISO22301). (*) Information Security - Vulnerability Assessment (internal and external networks ) . - Security Assessments Internal and External Network . - Evaluation of Wireless Security (Wardriving/Warwalking) - Review of General Controls SAS70 (ISAE 3402 ) - Cobit. - Implementation Methodology Information Asset Classification . - Analysis and Review of Security according to Circular No. 17(SBIF) - Analysis and review of Security transfers through POS ( Point of Sale) devices - Review of internal policies (ISO 27001-27002 )

Prior to joining CMR Falabellan and KPMG, Juan worked in the telecommunications company INCOBECH dedicated to project management, technical inspection of works and Implementation (Installation and Integration) mobile equipment. In developing this feature, Juan performed the analysis, troubleshooting and planning of the necessary inputs in the projects of mobile technology for 2G and 3G networks.