Consul Recognized as a Leader in Security Information Management by Independent Research Firm; Report Recognizes Consul InSight for its Centralized Security Operations Center, Distributed Incident Response and Compliance Management.

HERNDON, Va. -- Consul risk management, a renowned expert in enterprise security audit and compliance solutions, today announced it was among the select companies that Forrester Research invited to participate in its October 14, 2005 Forrester Wave reports entitled: "The Forrester Wave(TM): Security Information Management, Q4 2005" and "Security Information Management Scorecard Summary: Consul risk management" by Paul Stamp, Laura Koetzle, Natalie Lambert and Benjamin Gray. In this evaluation, Consul was cited as a Leader in the Security Information Management market. Analyst Paul Stamp acknowledged in the report that Consul has extended its traditional base in the compliance management marketplace with a solid security information management offering with its InSight Security Event Module that was launched in May 2005. E[acute accent]Forrester evaluated Consul InSight(TM) Security Manager (InSight) in the lab against approximately 200 criteria, including architecture and design, administration and reporting, and product direction. The Report stated that InSight logs activity by machines and people, on application servers and on the network, and associates that activity with policies. E[acute accent]In the report, Paul Stamp stated: "Security information management (SIM) is one of firms' most versatile weapons for handling security threats. Making sense of security information is harder than ever. Vendors' SIM products help customers detect threatening activities on the network, understand the importance or impact of the threats, and launch remediation plans. There are three common uses of the technology: centralized security operations centers, distributed incident response teams and compliance management." E[acute accent]In the report, the analysts stated that Consul's "product has an excellent architecture designed for geographically distributed incident response teams, security managers, auditors, and compliance officers. It integrates well in most environments by using network device and application agents and syslog forwarding. They also said that "the product is an especially good fit for buyers that: make audit and compliance top priorities and keep audit teams and security operations teams highly segregated." (Security Information Management Scorecard Summary: Consul risk management, Forrester Research, Inc., October 2005) E[acute accent]InSight's W7 methodology is a unique differentiator that translates security audit events into Who did it; What they did; When did it happen; Which application was used; Where from -- using Which host or connection; Where to; and on What system. This translation transforms logged audit events from deeply technical data into actionable information that provides focus on the way security events impact the overall business. E[acute accent]"Today's enterprises are drowning in an overwhelming volume of log data delivered by operating systems, security devices, applications and databases. Yet, this flood of data delivers little actionable insight into precisely what users are doing within the company," said Joseph Sander, president and CEO of Consul. "To protect corporate information and demonstrate compliance with regulations, companies must translate that log data into information which auditors and system operators can understand and act upon. Consul's unique user behavior audit and compliance approach to SIM enables organizations to handle security threats from every touchpoint of the network."

E[acute accent]About Consul InSight

E[acute accent]Consul InSight is one of the industry's first solutions addressing the intersection of audit and policy compliance efforts with information security and operational risk. Organizations need a way to manage events and user behavior in real-time and operationalize the audit process. Consul InSight helps hundreds of organizations worldwide safeguard their data and achieve compliance with internal policies as well as Federal privacy regulations. Using a patent-pending W7 (Who, did What, When, Where, Where from, Where to and on What) methodology, Consul InSight consolidates, normalizes and analyzes vast amounts of user and system activity, delivering instant alerts and reports on who touched what information and how those actions may violate external regulations or internal security policies.

E[acute accent]About Consul risk management, Inc.

E[acute accent]Consul risk management, Inc., a renowned expert in security audit and compliance solutions, delivers to the market The InSight Required(TM) for sound compliance, security event management, and identity and access management initiatives. With its roots as the premier provider of mainframe administration and audit products, Consul's enterprise solutions monitor, report and investigate both malicious and accidental violations of information use against external regulations and internal policies. E[acute accent]Consul has more than 350 customers in nearly two-dozen countries, including the Philadelphia Stock Exchange, Fidelity Financial Services, Kroger, Wachovia, The New York Times, Blue Cross/Blue Shield, Office Depot, Ford and many government agencies. Recently awarded the Windows IT Pro "Editors Choice" in Security, Consul has dual headquarters in the United States and The Netherlands and is represented by 25 partners worldwide, including BMC Software. For additional information about Consul and its products, services and partners, please contact Consul at 1 800.258.5077 or +31 (0) 15.251.3333 (Worldwide), or at www.consul.com.

E[acute accent]Consul InSight and Consul InSight 5.5 are trademarks of Consul risk management, Inc.