ADVISORY/Forrester and Consul Demonstrate How Managing Information Security is a Part of Operational Risk.

Business Editors/High-Tech Writers

ADVISORY...for Tuesday (May 25)

HERNDON, Va.--(BUSINESS WIRE)--May 18, 2004

Free Webinar Addresses Risk Analysis Assessment, Operational Risk and Reporting Relationships between Security Risk and IT

More than ever, organizations face the pressures of compliance to regulations and legislation related to how they manage their information. Sarbanes-Oxley, HIPAA, GLBA, Basel II, CA SB 1386, EU Data Protection, PIPEDA, FISMA--the list of regulations and standards is long and intimidating as organizations are tasked with managing information security as a part of operational risk.

Join Michael Rasmussen, principal security analyst and research leader for Forrester Research, Inc. and Consul risk management, Inc. on Tuesday, May 25, 2004 for a free online Webinar entitled, "Managing Information Security as a Part of Operational Risk." During this session, the presenters will discuss approaches to risk analysis assessment, the view and definition of operational risk, reporting relationships, and integration between risk and IT. Attendees will learn:

-- How the integration and management of security, as a part of

operational risk, requires careful structure and alignment

with business needs;

-- How to identify operational risk within an organization

through internal and external threats, policy violations and

regulatory compliance challenges, inefficient security

processes and the lack of data to conduct a forensic

investigation; and

-- Tools and techniques experts employ to create an enterprise

comprising an operational risk management function to manage

the facets of information security, physical security,

business continuity, insurance, privacy, assessment, and legal

and compliance functions.

Who:   Michael Rasmussen, Forrester Research, and Consul risk
       management, Inc.

What:  "Managing Information Security as a Part of Operational Risk"

When:  Tuesday, May 25th, 11:00 a.m. EDT

How:   To register, visit: http://www.consul.com/webinar/20040525

About Michael Rasmussen, principal security analyst/research leader, Forrester Research, Inc.

Mr. Rasmussen, a Certified Information Systems Security Professional (CISSP) with more than 10 years of security-related experience, provides advice to clients around the globe on issues pertaining to security risk management, information security standards, regulations and legislation, and technical security architectures. He has worked in both the consulting and enterprise sectors. Mr. Rasmussen currently serves as the vice president of standards and public policy on the Information System Security Association (ISSA) international board and as the chairman for the Generally Accepted Information Security Principles (GAISP), an ISSA initiative to set common principles for information security governance and requirements. Considered one of the foremost authorities in understanding the broad view and impact of information security standards, regulations and legislation, Mr. Rasmussen has worked closely with large commercial organizations and government agencies. His involvement in government initiatives has included contributions to U.S. Congressional Reports and working with the President's Critical Infrastructure Protection Board on the National Strategy to Secure Cyberspace. Mr. Rasmussen earned a B.S in business with a focus in information systems from the University of Phoenix.

About Consul risk management, Inc.

Consul risk management, Inc., is a leading worldwide provider of policy-based access detection and information protection solutions with more than 300 customers in 20 countries. Consul's audit and compliance monitoring and enforcement solutions secure business-critical information from loss and misuse. As a result, customers can increase their chances of avoiding a variety of penalties--ranging from regulatory fines to loss of corporate reputation--to ensure their survival. Consul's products are the first step in protecting business information from any internal or external users with access to the network and the required next step toward compliance, enforcement and forensic investigations.

Consul has dual corporate headquarters in the United States and the Netherlands, and is represented by 25 partners worldwide. Consul's clients include the Philadelphia Stock Exchange, Fidelity Information Services, Kroger, Wachovia, Norfolk Southern, The New York Times, Blue Cross/Blue Shield, Office Depot, Ford and numerous state governments and local municipalities. For additional information about Consul and its products and services, please contact Consul at 1-800-258-5077 or [phone] (Worldwide), or at www.consul.com.