Consul InSight Suite "Cuts the Job Down to Size" for Privileged User Monitoring, Earns "Hot Pick" in Information Security Review.

Consul Complements Record Growth with Accolades

from Leading IT Security Publication and Industry Analysts

HERNDON, Va. -- Consul risk management, Inc., the authority in security audit and compliance, today announced the Consul InSight Suite[TM] earned a Hot Pick distinction for a review in the leading IT security publication, Information Security. Technical Editor Brent Huston found the Consul InSight Suite to be "a powerful tool with well-defined policies for large organizations; it automates that daunting task of monitoring privileged user activity to meet security and compliance requirements."

"This review adds to the tremendous momentum Consul is experiencing in its 20th year," said Joseph Sander, president and chief executive officer of Consul risk management. "The feedback from Information Security matches the enthusiasm of our growing customer base and underscores that the urgent task of managing logs and monitoring privileged users can indeed be acut down to size' with the right technology. The review is another example of third-party validation that supports our approach to monitoring and analyzing user behavior."

"In large organizations, monitoring user activity is a truly formidable task," said Brent Huston, technical editor, Information Security. "Consul risk management's InSight Suite cuts the job down to size, employing SIM-like technology to produce actionable and auditable dataa[bar]InSight can issue alerts based on exceptions to user-defined policy, such as a DBA making unauthorized changes to a customer information table, or a sales manager accessing HR files."

The review also highlights Consul InSight's patent-pending W7 methodology, which translates disparate log data into a common, English-based language to consolidate, normalize and analyze vast amounts of user and system activity. "Its [Consul InSight] user-centric W7 model parses information into when, what, where, who, from-where (source), on-what and where-to categories--a simple but effective scheme for analyzing and reporting significant activity."

"Consul experienced record, profitable growth in Q3 2006; sales of Consul's audit and compliance solutions have grown at more than 100% per annum--a trend we expect to continue," added Sander. "Next to Consul's growth in new customers, Consul has seen an 80%+ product upgrade and/or expansion rate among its installed base of customers. This "Hot Pick" designation is a clear testament to our customers' satisfaction with InSight meeting their compliance and audit needs. This was recently further validated when a Consul customer delivered a Webinar testimonial to hundreds of listeners on the value and benefits of the InSight product."

The Information Security review is only one example of independent third-party validation of the Consul InSight Suite. Consul was positioned in Gartneras May 12, 2006 report titled, "Magic Quadrant for Security Information and Event Management,1H06," by Mark Nicolett, Amrit T. Williams and Paul E. Proctor.

In the October 14, 2005 Forrester Wave reports titled, "The Forrester Wave[TM]: Security Information Management, Q4 2005" and "Security Information Management Scorecard Summary: Consul risk management" by Paul Stamp, Laura Koetzle, Natalie Lambert and Benjamin Gray, Consul was cited as a Leader in the Security Information Management market.

To read the full review published in the November, 2006 issue of Information Security please visit: http://www.consul.com/files/PressRoom/20061115_ InformationSecurityMagazine_Review_InSight7.pdf (Due to its length, this URL may need to be copied/pasted into your Internet browser's address field. Remove the extra space if one exists.)

About Consul risk management, Inc.

Founded in 1986, Consul risk management is an authority in policy-based security audit and compliance. The Consul InSight[TM] Suite provides the unique ability to capture comprehensive log data, correlate the data through sophisticated log interpretation, and communicate results through a dashboard for full audit and compliance reporting. To reduce threats posed by privileged insiders, Consul InSight monitors change management procedures, acceptable use policies and user authorization processes against company and regulatory policies.

More than 350 customers around the world rely on Consul to accelerate log management and user monitoring, including AEGON Canada, Blue Cross/Blue Shield, Fidelity Financial Services, Ford, Kroger, The New York Times, Office Depot, Philadelphia Stock Exchange, Wachovia and government agencies. Consul has offices in the United States and the Netherlands, and 25 partners worldwide, including BMC Software. For additional information about Consul and its products, services and partners please call +1 800.258.5077 or +31 15.251.3333 (Worldwide), or visit www.consul.com.