Consul InSight Suite 6.0 Generates and Measures Security Policy to Enable Corporate Governance; Policy Generator Examines User Behavior to Establish a Security Policy Baseline; W7Log SDK Enables Auditing on Custom Applications.

HERNDON, Va. -- Consul risk management, Inc., a renowned expert in enterprise security audit and compliance solutions, today announced the immediate availability of the Consul InSight(TM) Suite 6.0 (InSight Suite), the newest version of the Company's flagship solution. InSight Suite delivers distinctive auditing and reporting capabilities to large distributed environments with thousands of users and domains. New features include an automated security policy generator; a solution development kit that completes missing audit trails; scalability and performance upgrades, a user-definable filtering capability; and enhancements to InSight's Security Event Management Module (InSight SEM). With InSight Suite 6.0, enterprises can more easily audit, report and baseline user activity to demonstrate compliance with industry standards, government mandates and corporate regulations.

"The enhancements to InSight extend Consul's lead as a policy-oriented auditing company, with unparalleled coverage across platforms, applications and devices," said Kristin Gallina Lovejoy, CTO of Consul. "Organizations must demonstrate to management, as well as external auditors, that there is an audit trail of who is accessing their data and changing key settings. By auditing and monitoring the people, processes, systems and information assets in the extended enterprise, InSight can help ensure user behaviors fall within operational risk appetites and comply with governance requirements. Consul InSight not only collects log files, but more importantly helps organizations make better decisions with the log data to maximize business performance."

"As auditors look for continued improvement in compliance practices, organizations are demanding the automation of compliance-critical processes in order to strengthen the compliance posture, as well as reduce the total cost of compliance and improve business performance," said Scott Crawford, senior analyst at Enterprise Management Associates. "By implementing a best practice audit framework, Consul InSight can help organizations ensure compliance across multiple regulations. The emphasis on auditing drives home the fact that organizations are increasingly implementing continuous measurement and reporting on whether the people, processes, information and IT systems are being used in accordance with security policy and regulatory requirements."

About Consul InSight Suite 6.0

InSight Suite is one of the industry's first solutions addressing the intersection of audit and policy compliance efforts with information security and operational risk. InSight Suite helps hundreds of organizations worldwide automatically monitor, report on and investigate malicious and accidental violations, in order to demonstrate compliance to regulations and company policy.

InSight Suite uses a patent-pending W7 (Who, did What, When, Where, Where from, Where to and on What) methodology to consolidate, normalize and analyze vast amounts of user and system activity; delivering instant alerts and reports on who touched what information and how those actions may violate external regulations or internal security policies.

This customer-driven product release contains enhanced features and benefits including:

--Automated Policy Generator- The Policy Generator leverages existing logs in order to baseline acceptable use policies. It automatically scans Windows operating systems and supported firewalls and gathers information about identities and access. InSight greatly reduces the time it takes to generate baseline policies by examining existing patterns of user behavior on the network, enabling organizations to start measuring and monitoring behavior on an accelerated basis. Policies can then be fine-tuned to meet corporate standards and regulatory compliance.

--W7Log SDK- Many applications are not compliance ready. They either do not generate the required audit trail or do this in a proprietary format. The W7Log SDK allows users to enable logging, and the subsequent archiving, auditing and reporting for applications that lack this capability; and transform existing application logs into Consul's W7 methodology, a format that is directly supported by Consul InSight.

--Architecture Enhancements- Architecture updates supporting the collection, storage, archive, and query of massive volumes of log data offer increased scalability, faster throughput, and world-class security for log data.

--Enhanced Standard and Customized Reporting- The easy-to-use filtering feature saves users time by supporting faster incident response, investigation and drill-down capability.

--InSight SEM 6.0 Real Time Alerts- Optional workflow integration with InSight 6.0 provides the first solution allowing security and network operations to monitor user behavior on a real time basis.

Pricing and Availability

Consul InSight Suite 6.0 is currently available as an upgrade for current InSight customers on the maintenance program. Pricing starts at $40,000 for new customers.

About Consul risk management, Inc.

Consul risk management, Inc., a renowned expert in security audit and compliance solutions, delivers to the market The InSight Required(TM) for sound compliance, security event management, and identity and access management initiatives. With its roots as the premier provider of mainframe administration and audit products, Consul's enterprise solutions monitor, report and investigate both malicious and accidental violations of information use against external regulations and internal policies.

Consul has more than 350 customers in nearly two-dozen countries, including the Philadelphia Stock Exchange, Fidelity Financial Services, Kroger, Wachovia, The New York Times, Blue Cross/Blue Shield, Office Depot, Ford and many government agencies. Consul has dual headquarters in the United States and The Netherlands and is represented by 25 partners worldwide, including BMC Software. For additional information about Consul and its products, services and partners, please contact Consul at 1 800.258.5077 or +31 (0) 15.251.3333 (Worldwide), or at www.consul.com.

Consul InSight is a trademark of Consul risk management, Inc.