Citadel Security Software's CEO to Present Opening Remarks at Focus on Federal Information Security Management Act Conference and Symposium.

Business Editors/High-Tech Writers

FISMA

DALLAS--(BUSINESS WIRE)--Jan. 22, 2004

CEO Steve Solomon to Provide Industry Perspective for Government

Leaders in Panel Discussion on: "How to Get A Passing FISMA Grade

and the Best Practices That Already Exist"

Citadel Security Software Inc. (OTCBB:CDSS), a leader in vulnerability management solutions, today announced the company's CEO, Steve Solomon, has been chosen to present the industry opening remarks at the Focus on Federal Information Security Management Act (FISMA) Conference and Symposium taking place on Tuesday, January 27 at the Ronald Reagan building in Washington, D.C. To help address the network security challenges facing both government and private institutions, Solomon will provide an "outside the beltway" industry view, and share his security expertise on best practices for managing vulnerabilities. In addition, Solomon will moderate a panel discussion which will include Drew Ladner, CIO of the Department of Treasury, and Barry West, CIO of FEMA.

"We are very pleased to have Steve Solomon participate in this year's Focus on FISMA Conference and moderate the CIO panel," said Art Chantker, president of the Potomac Forum, Ltd., organizer of the Focus on FISMA Conference along with ICG Government. "Events such as this create an invaluable synergy between government and business so that ideas and solutions can be shared by both."

In December the Federal Computer Security Scorecard of 2003 was released by Congressman Adam Putnam, chairman of the Subcommittee on Technology, Information Policy, Intergovernmental Relations and the Census. For the first time the grades were based on the Federal Information Security Management Act (FISMA) which was passed by congress in 2002. Overall the Federal Government received a grade of D, raised from an F the previous year. Only two agencies received a grade of A, the Nuclear Regulatory Commission and the National Science Foundation. Fourteen agencies received a grade below C, eight were failing.

Under FISMA, federal agencies are obligated to protect information and information systems from the unauthorized use, access, disclosure or disruption that can arise from unmitigated vulnerabilities. At the Focus on FISMA Conference, speakers from Congress and CIOs from government agencies will explore methods for improving FISMA grades. Topics that will be discussed include:

-- How and why FISMA grades were developed.

-- What elements Congress will be looking for when issuing grades

in 2004.

-- The future of FISMA.

-- Best practices for improving FISMA grades.

-- Ways for government agencies to leverage proven industry

solutions.

"The issue of network security in government is one of great magnitude, and the FISMA Conference is an extraordinary opportunity for government leaders and industry experts to learn from one another what really works," said Steve Solomon, CEO of Citadel Security Software. "I am excited to participate and I look forward to introducing proven security solutions and bringing an outside prospective to this event."

When:        Tuesday, January 27, 2004 7:30 a.m. to 5:00 p.m. EST

Where:       Ronald Reagan Building 1300 Pennsylvania Ave,
             N.W. Washington, D.C.

Who:         Steve Solomon, CEO of Citadel Security Software
             Congressman Tom Davis, Chairman of the House Government
              Reform Committee
             Congressman Adam Putnam, Chairman of the Subcommittee on
              Technology, Information Policy, Intergovernmental
              Relations and the Census
             Drew Ladner, CIO, Department of Treasury
             Barry West, CIO, Federal Emergency Management Agency
             OMB, GAO and Other Special Guest Speakers

To Register: Contact Schwartz Communications
             ([e-mail])

More Info:  http://www.potomacforum.org/?id=26&p=upcoming/FISMAl-01-04

About Citadel

Citadel Security Software Inc., a leader in vulnerability management solutions through automated vulnerability remediation and policy enforcement, helps enterprises effectively neutralize security vulnerabilities. Citadel's patent-pending Hercules(R) technology provides users with full control over the automated remediation process, enabling efficient aggregation, prioritization and resolution of vulnerabilities detected by industry-standard vulnerability assessment tools. Winshield(R) SecurePC(TM) and NetOFF(TM) products enable companies to enforce security policies from a single point of control. Citadel's solutions enable organizations to ensure the confidentiality of information, reduce the time and costs associated with the inefficient manual remediation process, and facilitate compliance with organizational security policies and government mandates such as HIPAA and Gramm-Leach-Bliley legislation. For more information on Citadel, visit www.citadel.com, or contact the company at 214-520-9292.

Safe Harbor/Forward-looking Statements:

This press release contains forward looking statements that are subject to risks and uncertainties, including the current economic and geopolitical environment, the current information technology spending trend, the uncertainty of funding of government information technology security projects, a lack of Citadel operating history, uncertainty of product acceptance, uncertainty of ability to compete effectively in a new market and the uncertainty of profitability and cash flow of Citadel. These risks and uncertainties may cause actual outcomes and results to differ materially from expectations in this presentation. These and other risks are detailed in Citadel's quarterly report on Form 10-QSB filed for the quarter ended September 30, 2003 and Citadel's annual report on Form 10-KSB filed for the year ended December 31, 2002. Editors Note: Citadel is a trademark and Hercules is a registered trademark of Citadel Security Software.