[0] Symantec and TruSecure to Provide Complementary Security Services; Symantec Adds TruSecure 2001 to Its Managed Security Services Offerings.

Business/Technology Editors

CUPERTINO, Calif. and HERNDON, Va.--(BUSINESS WIRE)--Dec. 3, 2001

Symantec Corp. (Nasdaq:SYMC), the world leader in Internet security technology and TruSecure Corporation, a leading security services company that provides corporations with a comprehensive information security health program, today announced a multi-faceted security services relationship. Symantec Security Services will utilize the TruSecure Service Provider 2001 service to certify the security posture of its Security Operations Centers around the world. To complement its existing offerings in education, managed security services, and incident response, Symantec Security Services will offer its customers the TruSecure 2001 service, which provides organizations with a process for managing information security risk in a changing environment. As part of the agreement, TruSecure will offer Symantec's managed security services to its customers. Additionally, TruSecure will utilize NetRecon, Symantec's leading vulnerability assessment tool, as part of their security assurance services.

"Symantec's decision to engage TruSecure to certify our Security Operation Centers is further evidence of our commitment to providing world-class managed security services," said Charlie Johnson, vice president of Global Business Development for Symantec Security Services. "Our customers are looking to Symantec for best-of-breed security products services and response, and this agreement allows us to provide our customers with access to TruSecure's industry recognized certification."

"Symantec is one of the world's leading security vendors and its selection of TruSecure 2001, for both independent certification of its Security Operations Centers and promotion of TruSecure to Symantec's global customer base, offers unmatched validation for TruSecure's approach to managed security services," said Sanjay Mehta, vice president of Business Development for TruSecure Corporation. "The combination offered by TruSecure and Symantec will provide our customers with unmatched breadth and depth of managed security services from security assurance through incident response."

Symantec Security Services has selected TruSecure's security assurance program as one of the independent certification programs for its U.S. and European Security Operations Centers (SOC). Under the agreement, customers relying on Symantec's managed security services will have the added confidence of knowing that Symantec's SOCs have been independently evaluated.

As part of the agreement Symantec and TruSecure will provide each other with customer referrals. Symantec Security Services will recommend TruSecure's security assurance and certification service to Symantec's global customer base for third party audits. TruSecure provides the risk management program that enables organizations to centrally manage enterprise-wide security by identifying risks to critical IT assets, mitigating those risks, and then maintaining an essential level of ongoing security health.

TruSecure will add Symantec's leading vulnerability assessment tool, NetRecon, to its suite of commercial and proprietary security applications used throughout the delivery of TruSecure security assurance programs. TruSecure's multi-phased approach utilizes best-of-breed technologies as a key component of assessing risks to an organization's critical systems and information. Symantec NetRecon provides network vulnerability assessment with progressive scanning technology. Its unique root-cause analysis engine illustrates the exact sequence of steps taken to uncover vulnerabilities.

About Symantec Security Services and Symantec Enterprise Security

Symantec Security Services provides information security solutions that incorporate best-of-breed technology, security expertise, and global resources to help enable e-business success. Through its service families, Symantec offers industry best practices, proactive monitoring and management, and security education. Managed Security Services provides outsourced solutions for the management and monitoring of security systems. And Education Services offers the knowledge to develop internal security skills and resources. Symantec Security Services is a key component of Symantec Enterprise Security.

Symantec Enterprise Security provides any size organization with the technology, global response and services necessary to manage its information security. Symantec's comprehensive solution offers best-of-breed products to protect gateways, servers, and clients with virus protection, firewall security, intrusion detection and vulnerability management. Customers benefit from Symantec's global network of researchers that provide customers with around-the-clock, immediate response to any new security-related attacks. Symantec Enterprise Security customers are also supported by one of the largest professional security organizations in the world, offering security education and managed security services. For more information, please visit Symantec's enterprise Web site at http://enterprisesecurity.symantec.com/

About TruSecure 2001

TruSecure 2001 is the first service that enables organizations to centrally manage an enterprise-wide program that identifies risk to their critical IT assets, mitigates that risk, and then maintains an essential level of ongoing security "health." TruSecure 2001 leverages a patent-pending Web-based method for integrating people, technology and processes into a continuous, coordinated and prioritized risk management program. TruSecure 2001 assures ongoing information security in a preventive manner, before threats become problems. TruSecure 2001's console provides CIOs and chief security officers a real-time window into the organization's status and progress towards complying with TruSecure's essential security practices.

About TruSecure Corporation

TruSecure provides global 10,000 companies with comprehensive enterprise risk-management programs that assure the ongoing security of their critical systems and information. By integrating disparate security products and processes into a comprehensive risk-management program, TruSecure helps hundreds of companies achieve greater risk reduction at lower cost. TruSecure 2001 leverages a patent-pending Web-based method for integrating people, technology and processes into a continuous, coordinated and prioritized risk management program. TruSecure 2001 is provided on an annual fixed-price, subscription-based model.

For more information about TruSecure please visit www.trusecure.com.

About Symantec

Symantec, the world leader in Internet security technology, provides a broad range of content and network security software and appliance solutions to individuals, enterprises and service providers. The company is a leading provider of client, gateway and server security solutions for virus protection, firewall and virtual private network, vulnerability management, intrusion detection, Internet content and e-mail filtering, remote management technologies and security services to enterprises and service providers around the world. Symantec's Norton brand of consumer security products is a leader in worldwide retail sales and industry awards. Headquartered in Cupertino, Calif., Symantec has worldwide operations in 37 countries. For more information, please visit www.symantec.com.

NOTE TO EDITORS: If you would like additional information on Symantec Corporation and its products, please view the Symantec Press Center at http://www.symantec.com/PressCenter/ on Symantec's Web site. All prices noted are in US dollars and are valid only in the United States.

Symantec and the Symantec logo are trademarks or registered trademarks, in the United States and certain other countries, of Symantec Corporation. Additional company and product names may be trademarks or registered trademarks of the individual companies and are respectfully acknowledged.

FORWARD LOOKING STATEMENT: This press release contains forward-looking statements, including statements regarding anticipated activities and results, that involve known and unknown risks, uncertainties and other factors that may cause our actual results, levels of activity, performance or achievements to differ materially from results expressed or implied by this press release. Such risk factors include, among others: the risks that current global adverse economic conditions and reduced spending will continue or worsen; currency exchange fluctuations will adversely affect our results; the continuing integration of the Symantec and AXENT will not be successful; the difficulty of developing and marketing products that compete effectively with others; new security threats and other economic, business, competitive and/or regulatory factors affecting Symantec's business generally. Actual results may differ materially from those contained in the forward-looking statements in this press release. Additional information concerning these and other risk factors is contained in the Risk Factors sections of the Company's previously filed Form 10-K for the year ending March 30, 2001 and the Form 10-Q for the quarter ended June 30, 2001.