Consul CTO Addresses the Patriot Act and SOX Standards at the 2006 ISACA Compliance Conference at C3 Expo; Kristin Lovejoy Examines Two Critical Regulations and Best Practices for Meeting Their Requirements.

HERNDON, Va. -- Consul risk management, the authority in security audit and compliance, today announced that its CTO Kristin Gallina Lovejoy will be presenting two sessions at the 2006 ISACA Compliance Conference, New York, on June 27 and 28 in the Compliance requirements track. The first is titled, "The Patriot Act: Know Your Customers and Cover Your Assets." The second is "SOX Section 409: Are You Fast Enough?" Lovejoy, a 2005 InfoWorld CTO of the Year, is a regular speaker at major industry conferences on these and other topics such as security event auditing, compliance, privacy, operational risk management and privileged user monitoring.

With the emergence of new and increasingly complex state, federal and international regulations, everyone involved with compliance--from the IT professional to upper management--must be prepared. As such, ISACA, in conjunction with select speakers, are addressing these compliance concerns.

The Patriot Act mandates that businesses operationalize the principle of "know your customer" by creating a number of industry specific regulations that improve how companies protect and control the business systems within their enterprise and across partner, supplier and customer chains. This session will help clarify the Patriot Act mandate and address who needs to comply, the penalties for noncompliance and what companies need to do to protect and control the business systems within their enterprises.

Titled "Real-time Issuer Disclosure," section 409 of the Sarbanes-Oxley Act requires organizations to disclose to the public "on a rapid and current basis (any) information concerning material changes in the financial condition or operations" of the company. This session will provide details about what section 409 means to organizations, as well as the processes they must have in place to meet its requirements.

Tuesday, June 27, 2006; 1:30 - 3:00 p.m. ET

What:      "The Patriot Act: Know Your Customers and Cover Your
           Assets"
Where:     Javits Convention Center, New York, New York
More Info: http://www.isaca.org/Template.cfm?Section=Education_and_Con
ferences1&Template=/ContentManagement/ContentDisplay.cfm&ContentID=243
22

Wednesday, June 28, 2006; 10:30 a.m. - 12:00 p.m. ET
What:      "Sarbanes-Oxley 409: Are You Fast Enough"
Where:     Javits Convention Center, New York, New York
More Info: http://www.isaca.org/Template.cfm?Section=Education_and_Con
ferences1&Template=/ContentManagement/ContentDisplay.cfm&ContentID=243
22

About Kristin Gallina Lovejoy

Kristin Lovejoy joined Consul risk management in June 2003. She is responsible for the worldwide delivery of Consul's products, consulting, customer support and presale activities. She also manages product management and product marketing activities. Lovejoy holds a U.S. patent for Object Oriented Risk Management Model and Methodology. She received an InfoWorld CTO 25 Award for 2005, honoring executives who have shown leadership both inside and outside of their organizations. Lovejoy earned her BA degree in English from Lafayette College. She has presented on a wide variety of security event auditing and compliance topics at industry events, such as InfoSecurity New York 2004 and 2005, Network World Conference and Expo, (ISC)2 InfoSecurity Security Leadership Conferences and CACS Europe 2006.

About Consul risk management, Inc.

Founded in 1986, Consul risk management is an authority in security audit and compliance. Consul provides policy-based user monitoring solutions to track, report on and investigate non-compliant behavior, such as unauthorized activity by administrators and other privileged users. The Consul InSight(TM) Suite automates the process of enterprise-wide log collection, privileged user monitoring, behavioral forensics and compliance reporting.

More than 350 customers around the world rely on Consul to accelerate their security audit and compliance efforts, including AEGON Canada, Blue Cross/Blue Shield, Fidelity Financial Services, Ford, Kroger, The New York Times, Office Depot, Philadelphia Stock Exchange, Wachovia and government agencies. Consul has offices in the United States and the Netherlands, and 25 partners worldwide, including BMC Software. For additional information about Consul and its products, services and partners please call +1 800.258.5077 or +31 15.251.3333 (Worldwide), or visit www.consul.com.

NOTE TO EDITORS: Due to the length of the URLs in the "More Info" sections, it may be necessary to copy and paste them into your Internet browser's URL address field)