One column - 0 4956

• Colin Carrasco - Network Engineer
• Dan Ryland - Security Management
• Project Profile - Multimedia
• Project Profile - Wayside Wireless

Job title: Security Manager
Group: Security - Access Management

Me

I've been with CN for 27-years now; all of them within IT. During this time, I've experienced numerous opportunities working in our IT Command Center (ITCC), on project development, acceptance testing, and promotion control & release management. I'm currently working within our security function. Some of the interesting projects I've been involved with over the years include Y2K, implementing our promotion control function and automated tools to support their work, and working on our Sarbanes-Oxley (SOX) compliance initiatives.

My role

Most of what I do today involves defining the direction and vision for our Access Management Security function. Recent changes in legislation, such as SOX, have made a significant impact on the way we work. A big part of my job is to find ways to get employees the access they need fast, while meeting our compliance requirements within these new laws. This includes planning, designing and implementing solutions to meet our security challenges (and there are many). Once implemented, CN must adhere to our own rules. It's not an easy task, especially when we process some 72,000 security requests annually.

Making a Difference

Evolution in technology and legislation has profoundly changed the way CN, IT and especially security conducts business. Working together with our Corporate Information Security Unit, we ensure that all access management processes are tight. If the wrong people gain access to CN information, our reputation could be compromised within the investor community and our customers. Ensuring adherence to legislation and finding ways to get business done is a daily challenge and responsibility.

Why CN?

CN offers me the latitude to establish my own boundaries in many of my jobs over the years. This is incredibly empowering and motivating. The CISU and Access Management Security functions touch both old and new technologies, and are involved in almost every IT project. As a result we have developed strong expertise in knowing the 'ins and outs' of security. We are essentially the gatekeepers of one of CN's largest assets; our information and knowledge It's a critical responsibility.