Cogentric RiskAssure-TM- Works with Risk Management Consultants to Assess Business Value of Risk.

Business/Technology Editors

RIMS

NEW ORLEANS--(BUSINESS WIRE)--April 15, 2002

Delivers clear, complete understanding of business impact of

operational risks and exposure to cyber-terrorism

Cogentric, developer of Alcon software, announces RiskAssure(TM), a cooperative program for their risk management consulting partners to identify and quantify the risks that threaten the client companies. Risks and remediation tasks are prioritized based on their impact to critical business functions.

According to William Fandrich, Cogentric president and COO, "RiskAssure(TM) combines the best of two worlds - first Cogentric works with the consultant to capture and embed their risk management and business expertise within Cogentric's Alcon Security Information Management Platform. Second, Alcon provides and automated mechanism to gather vulnerability information ranging from compliance with standards to vulnerabilities existing on an enterprise's critical technology resources. It then applies that consulting expertise methodology, financial algorithms and security-valuation rules to determine the business value of risk. These automated results are viewable through an Internet browser for 90 days following the end of the engagement to assist the client in fully understanding the nature of their risks and vulnerabilities and in managing any remediation activities they decide to pursue."

Cogentric RiskAssure Solution.

The true power of Cogentric Alcon lies in its ability to automatically rate risks based on a predetermined set of criteria defined by the consultant and client. These criteria are based upon key client business objectives, critical business functions and related financial results. Using Alcon, clients can answer dynamically generated questions and the consultant can initiate automated evaluations of the client's technology environment directly from the product. These results are then analyzed, correlated and interpreted to provide overall ratings of risk level and compliance with chosen management control standards, a high level scorecard, details on all identified vulnerabilities, and a prioritized action plan of recommended remediation tasks.

As a key enabler for professional risk consulting organizations, Cogentric's Alcon assists client companies in identifying, prioritizing and mitigating the IT risks associated with their business. Cogentric RiskAssure - a solution that leverages the expertise of today's leading risk consultants with Alcon, the industry's leading risk automation technology.

RiskAssure Benefits

-- Convenient -- Performs fast, repeatable risk assessments.

-- Non-Intrusive -- Delivers risk rankings based on exposure and consequence of
findings relative to your business expectations.

-- Action Oriented -- Creates customizable action plans tailored to support
your unique needs for business and IT management, including best practices.

-- Accessible -- Provides secure, convenient, role-based access to Web based
environment to enable timely and efficient review

-- Quantifiable Results -- Quantifies risk and management control effectiveness
for the business as a whole and by business unit, business function, location
and resources.

-- Flexible -- Incorporates a rules based engine for compliance measurement
programs (HIPAA, GLBA); or other internal or external regulations, guidelines,
service level agreements or standards, as needed.

-- Communication -- Achieves a common platform for communicating risks,
rankings and activities for your entire organization including Risk Managers,
IT Managers, and Senior Management.

-- Continuous Improvement -- Creates a custom knowledge base highlighting
strengths, vulnerabilities and risks within your Web environment. Enables you
to benefit from proven industry practices and concentrate on focusing on your
e-business viability.

-- Ease Of Use-- Provides simple to understand reports through a
straightforward, intuitive, graphical, point-and-click user interface.

-- Proactive -- Facilitates the management of remediation activities by
providing prioritization based upon severity, type, time frame and other
client-defined factors.

About Cogentric, Inc. Cogentric is the developer of Alcon, software designed to simplify the management of a company's electronic business environment and to assess the levels of risk and criticality of the components of a company's information security practices. The company is headquartered in Portsmouth, New Hampshire and can be found on the Web at www.cogentric.com