SECUREINFO LOWERS COST OF INFORMATION SECURITY COMPLIANCE AT FORTUNE 1000

Industry’s Most Comprehensive Knowledgebase of Regulations, Requirements, Controls, Tests & Policies Automated by ComplianceAuthority 3.5

San Antonio, TX - August 2, 2005 - SecureInfo Corporation, a leading provider of technology and expert services to strengthen sustainable information security compliance, today announced the release of ComplianceAuthorityTM 3.5. As the industry’s first practical management product and business process for conducting information security selfassessments, ComplianceAuthority commands an unmatched set of comprehensive regulatory and testing requirements enabling consistent and repeatable compliance at a lower cost. Based on a decade of successful government implementations, the introduction of ComplianceAuthority 3.5 coincides with enterprise-wide deployments this quarter at three new Fortune 1000 clients, including Merrill Lynch.

“ComplianceAuthority 3.5 represents a unique opportunity for enterprises to optimize the use of internal information security compliance resources via repeatable, automated processes,” stated Steve Kiser, chief executive officer at SecureInfo. “We are excited by the deep regulatory knowledgebase which enables our clients to determine what they should comply with and execute self-assessments, using the methodology, to demonstrate compliance.”

Building on SecureInfo’s experience assisting military and federal clients with information security compliance, ComplianceAuthority empowers Fortune 1000 enterprises to understand their regulatory obligations, map these obligations to accepted industry standards and practices, create a sustainable test, validation and self-assessment process and maintain consistent preparation for information security audits.

For companies operating in regulated markets, efficient information security and privacy programs are essential. Sarbanes-Oxley focused corporations on intense compliance activities in its first year of enforcement. In year two and beyond, corporations require a more sustainable solution for managing ongoing compliance activities. ComplianceAuthority meets this need: corporations can realize consistent information security and privacy programs with fewer resources and at a lower cost.

“ComplianceAuthority represents a milestone in how enterprises manage the ongoing costs of information security assessments to demonstrate compliance with multiple regulations,” continued Steve Kiser. “While enterprises are compliant, they face the ongoing responsibility of assuring information security using manual methods, spreadsheets and homegrown tools. ComplianceAuthority uniquely automates processes and increases efficiencies.”

ComplianceAuthority 3.5 Features • Incorporates industry-specific regulatory requirements and frameworks into one product, notably Sarbanes-Oxley, GLBA, HIPAA, ISO 17799, COSO, COBIT and FFIEC. • Documents evidence of controlled assessment processes. • Performs gap analysis based on a corporation’s requirements and assessment findings. • Reports and provides visibility into compliance activities at all levels of the organization. • Generates custom recommendations based on company-specific findings.

About SecureInfo
SecureInfo Corporation is a market-proven provider of Information Assurance (IA) solutions, enabling Federal organizations to understand, document and mitigate information security risk; assure information systems are secure; reduce security costs and achieve and demonstrate compliance with NIST, DIACAP and FISMA requirements. Since the company’s inception, SecureInfo has specialized in delivering unmatched customer service, deep domain expertise and proven IA solutions. Named as the “US Air Force Information Assurance Organization of the Year” and a “Lockheed Martin STAR Supplier,” among many other awards and recognitions, SecureInfo has a reputation for quality, commitment and results. Customers include U.S. Air Force, U.S. Army, the Department of Homeland Security, U.S. Treasury and NASA, among many others. Further information can be found at www.secureinfo.com.

###

SecureInfo is a registered trademark and SecureInfo RMS and SecureInfo RMS XD are trademarks of SecureInfo Corporate. All other products and brand names are trademarks or registered trademarks of their respective owners.