Black Dragon Software Begins Shipment of its proVizor Security Risk Measurement -SRM- Solution.

Business Editors/High-Tech Writers

STURGIS, Mich.--(BUSINESS WIRE)--Dec. 2, 2003

New SRM appliance brings increased level of enterprise IT security

measurement to market

Black Dragon Software, LLC, an emerging provider of software and services targeted at IT Security Risk Measurement ("SRM") and enterprise risk modeling, today announced it has begun shipment of its flagship product, proVizor SRM, the industry's first quantifiable, objective, standards-based IT Security Risk Measurement solution.

proVizor SRM measures the strength of IT security which protects both an organization's own intellectual assets and those the organization holds on behalf of its clients and trading partners. proVizor SRM allows an organization to make judgments about its IT security risks using an objective, repeatable and defendable measurement. This easy to understand measurement is based on the concept of Time-To-Defeat. Time-To-Defeat values are calculated by algorithms that simulate attacks against services, protocols and known vulnerabilities as they would affect each organization's unique environment. In developing proVizor SRM, Black Dragon Software relies on the deep security expertise and extensive research of the Black Dragon Software security analysis team to develop and keep current the algorithms and supporting information.

"To be successful, organizations must be connected electronically. Being connected means being exposed to cyber attacks. New legislation imposes obligations to protect intellectual assets with severe penalties for failure to do so. Until now, despite these obligations, there has been no way to answer the basic questions - How secure are we? Are we secure enough? Can we prove it?" said Chad Cook, Chief Technology Officer of Black Dragon Software. "With the delivery of our proVizor SRM solution, we are introducing a new tool which allows clients to set standards for IT security and track their performance against those standards. Finally, we can begin to bring IT Security Risk Measurement into the established world of Enterprise Risk Measurement."

Black Dragon Software recognizes that IT security is context sensitive. Every environment has different assets to protect and different vulnerabilities to defend against. One of the key concepts in proVizor SRM is the measurement of security from relevant Points of View. Stated simply, proVizor is designed to allow clients to identify key IT assets, and then measure their exposure to various avenues of attack or Points of View.

The resulting measurement information allows organizations to optimize security investments, assess security risks and enhance security-driven revenue opportunities. As important, proVizor SRM allows organizations to translate critical regulatory requirements into quantifiable measurements, then document compliance with those measurements. It does not presume to judge the adequacy of an organization's security. Instead, it provides the metrics by which an organization can make an informed judgment and then track security performance over time.

About Black Dragon Software, LLC

Black Dragon Software is a provider of software and services targeted at IT Security Risk Measurement and enterprise risk modeling. These solutions enable organizations to form judgements about their IT security risks using an objective, easy to understand measurement standard based on a defendable, repeatable mathematical database and process. These Security Risk Measurement solutions allow organizations to optimize security investments, assess security risks and enhance security-driven revenue opportunities. http://www.blackdragonsoftware.com

Cautionary Language

This press release may contain forward-looking statements that involve risks and uncertainties, including statements regarding expected benefits of use of the Company's products and future growth or results. Among the important factors which could cause actual results to differ materially from those in the forward-looking statements are competition, market demand, technological change, strategic relationships, recent acquisitions, international operations and general economic conditions.