Aveksa Unveils Aveksa 3, the Industry's Only Comprehensive Enterprise Access Governance Solution.

New Aveksa Role Manager and Enhanced Aveksa Compliance Manager Enable Automated Business Processes for Management, Monitoring, Reporting and Remediation of User Entitlements and Roles

WALTHAM, Mass. -- Aveksa, Inc. (www.aveksa.com) today announced the Aveksa 3 Enterprise Access Governance Suite, including the new Aveksa Role Manager, a role discovery and lifecycle management solution; and the third generation of its flagship product, Aveksa Compliance Manager, a policy-based solution for automated monitoring, review and remediation of user access privileges and compliance automation. The combined capabilities of these two products make Aveksa 3 the industry's first comprehensive solution for identity and access governance, risk and compliance.

Aveksa 3 automates the monitoring, reporting, certification and remediation of user entitlements and roles for information assets across the enterprise; enables role discovery and lifecycle management; and provides visibility into who has access to what; how they got that access; whether they should have access; and whether compliance objectives are being met. With Aveksa 3, organizations can more efficiently address security and regulatory demands through collaborative business processes that automate manual tasks, enforce accountability and provide evidence of compliance.

Aveksa's growing customer base includes CIGNA, one of the largest investor-owned health and related benefits organizations in the United States. "With Aveksa 3, we expect to automate what are currently manual processes for monitoring, reporting and certification of user entitlements and roles across our entire IT enterprise network," said Craig Shumard, chief information security officer at CIGNA. "Having tested Aveksa's technology across tens of thousands of users, millions of entitlements and several thousand roles, we are confident that it will provide the efficiency and scalability we need for enterprise-wide access governance at CIGNA." For more information about CIGNA's selection of Aveksa 3 to streamline its access governance processes, go to: http://www.aveksa.com/_Aveksa/web/news_events/press_6-18-07_CIGNA.aspx

Aveksa 3: Integrating Enterprise Access Governance into the Fabric of Business Operations 

The diversity of application and data assets across an enterprise, combined with the complexity of their related legacy, client-server, Web and service-oriented architectures, poses a daunting governance and risk management challenge. Managing the security risk and regulatory risk of inappropriate access to applications and information requires a strategic approach to access governance - one that is based on auditable business processes that enable line-of-business managers and information security, audit and compliance teams to collaborate while ensuring accountability, transparency and visibility.

Aveksa 3 is the only technology solution that facilitates effective collaboration between business and security teams and makes access governance, risk and compliance operational - delivering visibility into entitlements, roles and associated change management; automating access certifications; enabling role discovery and lifecycle management; enforcing compliance controls, including segregation of duties controls; and analyzing risk.

"While investments in identity management technologies have helped organizations better address regulatory demands, they still face significant challenges in how they collect and review user entitlements, define and maintain roles, and manage remediation for all of their compliance-relevant applications," said Lori Rowland, analyst with the Burton Group. "Obtaining a clear picture of user access to these applications requires extensive manual effort, and entitlement change requests and approvals are often difficult to track and audit. Organizations are seeking to automate these tasks and integrate role lifecycle management, entitlement management and identity auditing into a single solution."

Introducing Aveksa Role Manager

A new addition to the Aveksa 3 Enterprise Access Governance Suite, Aveksa Role Manager is the first product to take an holistic approach to meeting the challenges of defining, creating and maintaining roles enterprise-wide, while addressing the unique needs of both business and security teams. Aveksa Role Manager enables organizations to implement a roles-based governance strategy that encompasses role discovery, modeling, lifecycle management and certification.

With Aveksa Role Manager, security and line-of-business managers are able to collaborate in the discovery and maintenance of IT and business roles. Aveksa Role Manager enables organizations to simplify both role-based access control and compliance, and reduce the risk of exposure.

Aveksa Compliance Manager Enhancements

The third generation of Aveksa Compliance Manager features built-in integration with popular user provisioning solutions, enterprise-wide remediation of entitlements and roles, simplified access certifications, enhanced detection of identity changes and new capabilities for entitlement change management and auditing.

"Managing the risks of inappropriate access to applications continues to be a challenge for most organizations," said Deepak Taneja, CEO of Aveksa. "Aveksa 3 enables business, security and compliance teams to collaborate, automate manual tasks, and make access governance, risk and compliance operational."

For information about Aveksa 3, including an expanded list of product features, please visit: http://www.aveksa.com/_Aveksa/web/products/product_highlights.aspx

About Aveksa

Aveksa provides the only comprehensive, enterprise-class, access governance, risk management and compliance solution. Aveksa automates the monitoring, reporting, certification and remediation of user entitlements and roles; enables role discovery and lifecycle management; and delivers unmatched visibility into the true state of user access rights. With Aveksa, business, security and compliance teams can effectively collaborate and enforce accountability. Our growing customer base includes leading organizations in financial services, healthcare and manufacturing. For more information, go to www.aveksa.com