Company: AKO-B
Filing Date: 2025-03-26
Form Type: 20-F
Source: 0001410578-25-000473
Chunk: 173

Company: ANDINA BOTTLING CO INC
Filing Date: 2025-03-26
Form: 20-F
Item: Item 16K
Chunk 173
---
ational technology) at the corporate and regional level, overseeing the implementation of improvements, architectures, policies, and standards related to the protection of the organization’s digital assets. In addition, the CISO manages the IT Risk Map (IT RIA) and related mitigation plans, ensuring that necessary modifications are made to maintain compliance with the company’s regulatory framework and standards. Currently, Eduardo Troncoso Meza serves as our CISO. Mr. Eduardo Troncoso Meza has more than fifteen years of experience in the fields of cybersecurity and information security management. Prior to his current position, Mr. Troncoso held the position of Cybersecurity Architect at Banco BCI. In order to determine the proper implementation of technological security controls, he was tasked with designing and proposing architecture models and solutions for identifying threats, vulnerabilities, and risks on the applications that provide services to the various platforms of the bank. Mr. Troncoso received his Engineering Sciences degree and obtained a Computer Engineering degree from Universidad de Las Américas. Mr. Troncoso also holds a Diploma in Cybersecurity from Universidad de Chile, and has the following certifications:

●   Information Security Management Systems Auditor/Lead Auditor Training Course (BS ISO/IEC 27001:2013) – BSI;
---------------------------------------------------------------------------------------------------------------

●   ISO/IEC 27001 Lead Implementer – PECB; and
----------------------------------------------

●   Cybersecurity for Managers Certificate: A Playbook from the Massachusetts Institute of Technology.
------------------------------------------------------------------------------------------------------
Policy for Information Security 
The Company’s information security policy is an ongoing process designed to protect information assets from threats that could compromise their availability, integrity, or confidentiality. The corporate information security policy was created and put into effect to strengthen this pillar. In addition to providing general guidelines on the access, handling, manipulation, processing, transmission, and storage of the Company’s information assets, this policy seeks to establish general guidelines regarding the responsibility, protection, and management of information risks. The implementation of this policy involves the classification of information, the definition of responsibilities, and the use of digital solutions to strengthen its execution. Examples of these solutions include the unification of information storage and transfer mechanisms, the protection of information through Data Lost Prevention (DLP) practices, and the encryption of information stored on the Company’s essential equipment. The CISO is in charge of the Company’s information security strategy, policies, guidelines, and practices.

106

Cybersecurity provider risk and measurements management
Infrastructure and information security services are outsourced to one of