ArcSight and Foundstone Partner to Offer Customers Holistic Enterprise Security Risk Management.

Business Editors/High-Tech Writers

MISSION VIEJO, Calif.--(BUSINESS WIRE)--Sept. 9, 2003

Government Departments and Large Organizations Now Able to

Correlate Risk on Pre-, Present and Post-Basis

Foundstone, Inc., experts in strategic security, today announced it has become a partner in ArcSight's ESA (Enterprise Security Alliance) program. Through the partnership, Foundstone and ArcSight offer product interoperability to provide large organizations and government departments a holistic approach to enterprise risk management.

Through a coordinated infrastructure that integrates security data from Foundstone Enterprise Risk Solution software into ArcSight 2.2's TruThreat(TM) Risk Correlation technology security managers can precisely correlate vulnerability and threat data on a real-time and historical basis to further shorten the time to remediation by focusing limited resources on the most critical threats posed to the most important assets.

"The Foundstone/ArcSight partnership arms organizations with the knowledge and resources they need to maximize their investment in enterprise security, and is another example of how Foundstone gives its customers a leading edge," said Stuart McClure, president and CTO of Foundstone. "Security resources can be drained when security managers employ vulnerability assessment software that uses superfluous checks, generates inaccurate data and creates voluminous reports that force managers to tread water in a sea of data. By employing, filtering and correlating highly accurate vulnerability and threat data, security managers can take a holistic approach to security, and use the intelligence in real-time to laser-focus their efforts to protect their most valuable assets."

According to a recent Gartner report, the core value of centralized security management is to correlate security data from multiple devices and systems to improve security assessment and corrective action -- including separating real threats from the background noise of ineffective probes, false alarms and normal security changes.

ArcSight's custom Foundstone SmartAgent helps organizations cut through the "white noise" of inaccurate threats, by culling vital vulnerability information from the FoundScan Engine, and leveraging it against asset value and real-time event data provided by ArcSight's TruThreat Risk Correlation system. Large enterprises are now able to profit from an automatically calculated, highly accurate threat index, which allows them to reduce the time needed to manage threats and attacks, automate incident investigation and response, as well as simplify forensics investigations and reporting. This powerful approach maximizes asset protection while decreasing overall costs.

Additional benefits of correlating vulnerability data from Foundstone Enterprise with threat data managed by ArcSight include:

-- Unprecedented scalability and control via distributed security

architecture: Both Foundstone and ArcSight offer distributed

architecture to support multiple deployment scenarios, from

peer-to-peer to geographically distributed architecture.

-- Real-time monitoring and forensic investigation for instant

switching between modes for efficient management and unlimited

real-time and historical reporting.

-- Automated incident investigation and response work flow for

quick remediation of threats and incidents, ability to track

incident workflow through case management system, and access

to a knowledge base to ensure consistent application of

policies and procedures.

"ArcSight is proud to integrate with Foundstone's award-winning technology as part of our commitment to delivering best-of-breed solutions," said Hugh Njemanze, CTO of ArcSight. "This mutually beneficial relationship with Foundstone creates a strong product offering for our joint customers, and allows us to leverage co-marketing resources and sales synergies to broaden our sales channel."

For example, one of the world's largest financial services organizations requested that security data from Foundstone Enterprise vulnerability management software be imported and automatically correlated with the ArcSight asset table that labels assets by criticality and value to the organization. When a real attack is detected by ArcSight's TruThreat Risk Correlation, the financial services institution can accurately and immediately confirm whether its most valued assets are vulnerable to that attack, and if so, automatically take action and generate a real-time alarm to the asset owner who can take additional steps to remediation.

About ArcSight

ArcSight is a leading provider of security risk management software that enables large organizations to achieve increased protection, more productivity and greater visibility from their security function. By delivering a single solution for event aggregation, real time correlation, incident investigation and reporting, ArcSight provides a coordinated infrastructure that maximizes asset protection while decreasing overall costs. ArcSight features TruThreat(TM) Risk Correlation, which allows enterprises to focus on the protection of business assets by utilizing vulnerability assessment data, asset value and real-time alarm information to identify and manage true threats and attacks in real time. ArcSight's customers include major financial services organizations, government agencies, manufacturers and managed service suppliers such as Harris Corporation, Union Bank of California, Sandia National Laboratories, and Corio. More information can be found at http://www.arcsight.com

About Foundstone

Foundstone(R) Inc., experts in strategic security, offers a unique combination of software, services, and education to help organizations continuously and measurably protect the most important assets from the most critical threats. Through a strategic approach to security, the company identifies and implements the right balance of technology, people and process to manage digital risk and leverage security investments more effectively. Foundstone assembled one of the most dominant security talent pools, which has authored ten books, including the international best-seller Hacking Exposed. Headquartered in Calif., Foundstone maintains major offices in New York, Washington, D.C., Seattle and Singapore. For more information about Foundstone, visit www.foundstone.com, or call 877.91.FOUND within the U.S., and 949-297-5600 outside the U.S.

Note to editors: All trademarks and registered trademarks are the property of their respective owners.