Consul Recognized as a Leader in Enterprise Security Information Management by Independent Research Firm.

Report Cites Consul's "Strong Audit and IT Compliance Monitoring"

HERNDON, Va. -- Consul risk management, Inc., the authority in security audit and compliance, today announced it was among the select companies that Forrester invited to participate in its December 5, 2006, Forrester Wave reports entitled: "The Forrester Wave[TM]: Enterprise Security Information Management, Q4 '06," by Paul Stamp, Laura Koetzle and Khalid Kark. In this evaluation, Consul was cited as a leader in enterprise information security management. Analyst Paul Stamp wrote in the report that Consul has "expanded its traditional focus on audit and IT compliance with many useful features for the analyst in the security operations center (SOC) as well as those conducting digital investigations."

Forrester evaluated Consul's current offering and strategy for enterprise security information management (SIM) against approximately 62 criteria including compliance and reporting, digital investigation and product strategy. The report stated that Consul is an especially good fit for buyers that need more advanced database monitoring than other SIMs can provide, and have complex IT compliance requirements.

In the report, the analysts stated, "Consul has an excellent dashboard that identifies the problem areas within an organization that need attention. It also has excellent capabilities to tie reports back to specific frameworks and regulations and easily allows customers to map those reports back to their own policies." They also said that "Consul risk management has an excellent capability to collect, store and query logs to identify incidents and policy violations. It also has good capabilities for mapping activity back to a specific user. (Consul risk management Scores High Marks Among Enterprise SIM Solutions: The Forrester Wave Vendor Summary, Q4 2006, Forrester Research, Inc., December 2006).

"CIOs and CISOs are responsible for the activity and information crossing their network infrastructure. It is no longer acceptable to point fingers and make decisions without first understanding how a specific event relates to internal and external policies," said Joseph Sander, president and chief executive officer of Consul risk management. "Consul has always viewed the enterprise SIM challenge from a user behavior perspective. Log management is the essential first step to gleaning data. The challenge also lies in converting that data into actionable information for auditing user activity, identifying potential threats and demonstrating policy compliance to the auditor and to the board."

About Consul risk management, Inc.

Founded in 1986, Consul risk management is an authority in policy-based security audit and compliance. The Consul InSight[TM] Suite provides the unique ability to capture comprehensive log data, correlate the data through sophisticated log interpretation, and communicate results through a dashboard for full audit and compliance reporting. To reduce threats posed by privileged insiders, Consul InSight monitors change management procedures, acceptable use policies and user authorization processes against company and regulatory policies.

More than 350 customers around the world rely on Consul to accelerate log management and user monitoring, including AEGON Canada, Blue Cross/Blue Shield, Fidelity Financial Services, Ford, Kroger, The New York Times, Office Depot, Philadelphia Stock Exchange, Wachovia and government agencies. Consul has offices in the United States and the Netherlands, and 25 partners worldwide, including BMC Software. For additional information about Consul and its products, services and partners please call +1 800.258.5077 or +31 15.251.3333 (Worldwide), or visit www.consul.com.