Configuresoft Appoints Dave Shackleford as Director of Center for Policy and Compliance.

Accomplished Information Security Expert Brings Deep Domain Expertise in Security, Compliance and Virtualization; Nominated to PCI Security Vendor Alliance Board

COLORADO SPRINGS, Colo. -- Configuresoft, the world's leading enterprise server configuration management company, today announced the appointment of Dave Shackleford to director of the company's Center for Policy and Compliance (CP&C). Mr. Shackleford heads up Configuresoft's team of security and compliance experts dedicated to researching and understanding the myriad of security configuration benchmarks, system hardening best practices and regulatory standards in order to allow customers to adopt and manage security and compliance policies effectively.

Mr. Shackleford brings more than 12 years of diverse high-technology systems management and security experience to Configuresoft. Most recently, Shackleford served as CTO of the Center for Internet Security (CIS) where he led the consensus group behind the CIS Virtual Machine Security Guidelines and the CIS VMware ESX Server Benchmark. In this role, Shackleford brought together a broad team of contributors to create the first virtual machines benchmark of its kind. Prior to joining CIS, Shackleford served as vice president of business development and chief security architect for Vigilar, an information security consulting company, and has held information security management positions at Norfolk Southern Railways, AirTran Airways and Northrop Grumman.

On March 26, 2008 at the member meeting in Austin, Texas, Shackleford was elected to the PCI Security Vendor Alliance (SVA) Board of Directors. The PCI SVA works with the retail and payment card industries to develop efficient and cost-effective ways to achieve compliance with the PCI Data Security Standards (PCI DSS), a global benchmark intended to improve security throughout the entire payment card transaction process.

Shackleford also serves on the Board of Directors of the SANS Technology Institute and the Technology Association of Georgia. He is a regular contributor to publications such as Information Security, CRN, Financial Times, InfoWorld and Bank Technology News. He also co-authored the text book "Hands-On Information Security Lab Manual." Shackleford is a frequent speaker at industry events and will be a featured speaker at the upcoming RSA Conference, joining Configuresoft's CTO Dennis Moreau and co-chair of CIS Virtual Machines Benchmark, Chris Farrow, for the panel discussion, "Mitigating Virtual Machine Security Vulnerabilities," on Tuesday, April 8 at 3:00 p.m. PDT.

"Dave brings a wealth of knowledge on the issues affecting IT today, relationships with security and compliance leaders and experts, along with a powerful and respected voice in the industry," said Mark Ruport, president and CEO of Configuresoft. "Configuresoft customers will benefit greatly from Dave's leadership of the Center for Policy and Compliance."

"Working closely with Configuresoft during the development of the CIS Virtual Machines Benchmark, I experienced first-hand the company's commitment, through CP&C, to provide research and analysis to make the job of maintaining secure and compliant IT environments manageable," said Shackleford. "With requirements and complexities such as PCI DSS and virtualization continuing to pile up, CP&C is unique in the industry in its ability to provide customers with valuable expertise and actionable security and compliance content. I am thrilled to be a part of such a talented team."

Dave Shackleford will be joining Configuresoft CTO Dennis Moreau and PCI Alliance Founder and President Dave Taylor at Configuresoft's booth (#739) at the RSA Conference as part of a special "Meet the Experts" opportunity. Shackleford, Moreau and Taylor will be on-hand to answer questions and discuss current industry trends and issues during show hours.

Shackleford holds a Masters in Business Administration from Georgia State University and a number of industry certifications including CISSP, SANS GSEC, SANS GCIH, SANS GCIA, SANS G7799, SANS GWAS, CCNA, MCSE, VISA QDSP/QSA, and Master CIW Admin.

About Configuresoft

Configuresoft, the world's leading enterprise server configuration management provider, delivers the Configuration Intelligence[R] that brings automation and intelligence to IT operations. Hundreds of organizations, including 13 of the world's 25 largest companies, rely on Configuresoft to effectively and efficiently manage the complexity of today's physical and virtualized IT environments. Configuresoft's team of security and policy experts ensure continuous compliance with regulatory requirements such as Sarbanes-Oxley and industry standards such as PCI DSS and Microsoft and VMware Hardening Guides. To contact Configuresoft, please call (888) U-CONFIG or visit www.configuresoft.com.