Consul and BMC Software Announce Global Alliance to Enable Regulatory Compliance.

Business Editors/High-Tech Writers

Computer Security Conference 2003

HERNDON, Va. & HOUSTON--(BUSINESS WIRE)--Nov. 3, 2003

Best-of-breed Players in Security Administration and Audit Partner to Simplify IT Security Management and Regulatory Compliance for Large Enterprises

Consul risk management, Inc., the leading worldwide provider of security event management and auditing (SEMA) solutions, and BMC Software, Inc. (NYSE: BMC), a leader in enterprise management, today announced a global alliance to offer customers total management of security administration and auditing to enable regulatory compliance. In combination, BMC Software's CONTROL-SA(R) product suite and Consul InSight(TM) Security Manager (Consul ISM(TM)) will provide the enterprise-wide ability to administer users, identities and rights, while auditing user behavior, file access and policy compliance.

Consul and BMC Software will be demonstrating at the Computer Security Conference and Exhibition at the Marriott Wardman Park Hotel in Washington, D.C., Johnson Room Hospitality Suite, November 3rd, 5:15 p.m. - 6:30 p.m.

"Security events do not happen only at the network perimeter, they happen throughout an organization's IT infrastructure," said Steve Hunt, vice president and security leader at Giga Information Services. "Often, the greatest risk to an organization involves incidents that happen at the application and data levels."

Under the agreement, the Consul-BMC Software Global Alliance will offer a combination of centralized enterprise security administration and auditing. Driven by customer demand for best-of-breed solutions in both areas, this comprehensive marketing alliance will offer the two organizations joint sales and marketing activities, and enable them to explore technical integration points between their solutions.

"BMC chose to work with Consul for its user- and policy-based approach to security event management and auditing, as well as its specialization in regulatory compliance," said Somesh Singh, vice president and general manager, CONTROL-SA, BMC Software. "When used together, Consul and BMC solutions lower the cost of regulatory compliance and decrease the chance of regulatory and audit violations by automating extremely labor-intensive tasks such as identity management, administration and auditing."

"The bottom line is that companies must tighten the security of their crucial corporate data. At the same time, their users need access to multiple IT resources, each with its own security system," said Koen Bouwers, CEO, Consul. "The BMC-Consul solutions help ensure that this data does not get into the wrong hands. Comparing what should occur to what actually does occur makes the combined solution particularly relevant for compliance and monitoring needs. Violations are reported in real-time or in batch and corrected using a central administration capability."

About Consul InSight Security Manager

The Company's flagship product, Consul InSight Security Manager, is a complete solution that enables security event management and auditing by viewing the activities of both "trusted" users and intruders; monitoring all technologies, including security devices, applications, servers, operating systems and mainframes; and incorporating the generation and enforcement of security policies. Additionally, organizations can easily correlate the vast hodgepodge of network activities into real-time alerts and useful reports vital to daily operations. Consul ISM dramatically reduces the time, people and money required to achieve compliance and enable security best practices.

In addition, Consul ISM now features Compliance Management Modules that pair its comprehensive event management and audit capabilities with the regulation-specific policies, templates and reports needed to streamline compliance initiatives. By eliminating the need to manually create, log and monitor templates and policies for each new regulation, Consul InSight Security Manager lowers the cost of regulatory compliance and reduces the chance of violations.

About CONTROL-SA

A centralized user provisioning product, CONTROL-SA allows security administrators to centrally manage and audit user access effectively. CONTROL-SA provides organizations with a secure, efficient and scaleable solution to ensure that employees and business partners have appropriate access to IT resources. For more information on CONTROL-SA visit http://www.bmc.com/solutions/security/.

About Consul risk management, Inc.

Consul risk management, Inc., named Organization of the Year by the Information Systems Security Association (ISSA), is a leading worldwide provider of security event management and auditing (SEMA) solutions with more than 300 customers in 20+ countries. Consul's policy-based software monitors and audits relevant security events across a company's IT environment enabling regulatory compliance and security auditing while improving operational effectiveness. From one central console, users can view consolidated network activities, correlate events across platforms and determine if such activities violate best security practices.

Consul has dual corporate headquarters in the United States and the Netherlands, and is represented by 25 partners worldwide. Consul's clients include the Philadelphia Stock Exchange, Fidelity Information Services, Kroger, Wachovia, Norfolk Southern, The New York Times, Blue Cross/Blue Shield, Office Depot, Ford and numerous state governments and local municipalities. For additional information about Consul and its products and services, please contact Consul at 1 800.258.5077 or [phone] (Worldwide), or at www.consul.com.

About BMC Software

BMC Software, Inc. (NYSE: BMC), is a leading provider of enterprise management solutions that empower companies to manage their IT infrastructure from a business perspective. Delivering Business Service Management, BMC Software solutions span enterprise systems, applications, databases and service management. Founded in 1980, BMC Software has offices worldwide and fiscal 2003 revenues of more than $1.3 billion. For more information about BMC Software, visit www.bmc.com.

Consul InSight and Consul InSight Security Manager and Consul ISM are trademarks of Consul risk management, Inc.

BMC Software, the BMC Software logos, and all other BMC Software product or service names are registered trademarks or trademarks of BMC Software, Inc.