Avanade Patch Management Solution Provides Framework for Vital Enterprise Defense.

Business Editors/High-Tech Writers

SEATTLE--(BUSINESS WIRE)--Jan. 8, 2004

Integrator's Product Expertise, Experience, Proven Methodology Help

Siebel Systems' Security Operations

To help manage and prioritize patch and security updates, Avanade Inc., a premier technology integrator for Microsoft(R) solutions in the enterprise, delivers a structured, formal approach to patch management, based on a holistic assessment of a customer's information security. Using the Avanade Patch(R) Management Solution, companies such as Siebel Systems, Inc. (NASDAQ: SEBL) have streamlined security measures and reduced risk.

Avanade's approach provides customers with greater insight into patch status, a thorough analysis of change configuration processes, and assistance bringing crucial systems' patch status up-to-date, resulting in a comprehensive plan for operational excellence in IT infrastructure protection.

"The methodology, tools and best practices that make up the Avanade Patch Management Solution have proven extremely effective for customers - and effective as part of our own internal security measures, too," said Ashish Kumar, Avanade chief technology officer. "We've packaged these resources to help customers make the most of security capabilities built into technology such as Microsoft Operations Manager and Microsoft Windows Server 2003. Customers get more value from their infrastructure investments and gain efficiency in their operations."

The Avanade Patch Management Solution produces a framework tailored to each customer, including a process for evaluating, installing and maintaining patches to bring patch management procedures to world-class reliability. The solution takes into account tools for infrastructure optimization and automation - including Microsoft Operations Manager (MOM), Microsoft Systems Management Server 2003, Microsoft Software Update Services (SUS) and Microsoft Windows Update - and is based on approaches and best practices described under Microsoft Solutions for Management.

Effective, Efficient Patch Management for Siebel Systems

Siebel Systems, a leading provider of multi-channel business applications software, enlisted Avanade to streamline and enhance its patch deployment, including monitoring systems status. With more than 2,200 servers and 12,000 workstations to manage, Siebel Systems' IT staff sought to improve the speed with which they could assess the impact of a security threat and prioritize appropriate action, based on an accurate, up-to-date baseline of system status - that is, where patches had been deployed.

"We were impressed by Avanade's deep expertise in Microsoft technology and holistic approach to security. Their rigorous approach based on best practices meant Avanade quickly brought us a framework for effective security operations at reduced cost," said Alan McIntosh, senior manager, IT Architecture, Siebel Systems. "By optimizing our systems and procedures for patch management and identifying ways to minimize vulnerability in our IT infrastructure, we expect Avanade's solution to cut our risk of loss from security failures."

Avanade undertook a comprehensive security evaluation including people, processes and technology, to create a Security Action Framework for Siebel Systems, incorporating best practices related to operations and technology, such as Microsoft Solutions for Management. The Security Action Framework includes procedures and evaluation methodologies for IT staff to determine appropriate security response and to assess updates for appropriate action. Avanade helped establish a comprehensive baseline inventory of all systems and patch levels, as well as reporting mechanisms to ensure systems are patched. In addition, Avanade assisted Siebel Systems with the selection process to identify the right combination of tools to address the patch management problem.

"Business customers like Siebel have told us they need tools and technologies to meet their security challenges," said Jonathan Perera, senior director of the Security Business and Technology Unit at Microsoft Corp. "We are working closely with Avanade and other partners to improve software quality, simplify patch management, and develop new safeguards to help protect critical data and information."

A pilot implementation of Microsoft Systems Management Server 2003 and Microsoft Software Update Services (SUS) is now in place. Siebel Systems is deploying patches in a targeted fashion based on this infrastructure developed with Avanade's help.

"Our IT department is equipped to be more productive, as our team can now prioritize security responses based on accurate understanding of the patch status of server, desktop and laptop equipment," said McIntosh.

About Avanade

Avanade is the world's premier technology integrator for Microsoft solutions. The certified technologists at Avanade help customers use Microsoft technology to realize a lower total cost of ownership for their infrastructure and application investments. Additional information can be found at www.avanade.com.

Avanade and the Avanade logo are registered trademarks or trademarks of Avanade Inc. Other product, service, or company names mentioned herein are the trademarks or registered trademarks of their respective owners.