Critical Path's Chief Security Officer to Address Key Security Issues.

Business Editors/High-Tech Writers

SAN FRANCISCO--(BUSINESS WIRE)--Sept. 18, 2000

Mike Serbinis To Highlight Company's Security Vision

At Baltimore Technologies' Global e-Security 2000 and

EMA's Solutions Summit 2000

Mike Serbinis, chief security officer at Critical Path Inc. (Nasdaq:CPTH), the leading provider of Internet messaging infrastructure, will highlight the company's global security vision to audiences at two major security tradeshows this month, Baltimore Technologies' Global eSecurity Summit and EMA's Solutions Summit. As a leading security expert, Serbinis' educational sessions emphasize Critical Path's commitment to informing businesses worldwide how to develop secure enterprises through a comprehensive approach.

On September 19, 2000 at 4:15 p.m., Serbinis will deliver a session on The Role of Directories in Securing the Enterprise at Baltimore Technologies' Global e-security conference in Orlando, Fla. For his discussion on directories, Serbinis will discuss the major role directories play in enabling companies to provide a secure business environment for their employees, customers and partners. He will also explain how digital assets can be protected through directory solutions, enabling businesses to start building a comprehensive approach to secure e-business.

In his session on September 20, 2000 at 1 p.m. for EMA's Solution Summit, titled The Birth of A New Institution: Protecting Digital Assets, Serbinis will describe how today's information and intellectual property have evolved to become a digital currency that needs to be protected through a comprehensive approach to security. This comprehensive approach is the marriage of the best processes, people and technology.

"The flow of information is what is driving most businesses today and consequently brings up a variety of security issues such as virus scanning, controlling spam and digital verification via PKI," said Mike Serbinis, Chief Security Officer for Critical Path. "My goal at these sessions is to help companies understand the comprehensive approach to security that must be taken in order to protect valuable digital assets and to secure the enterprise for effective e-business. A comprehensive approach involves more than simply tacking technologies as an afterthought as problems arise. Security issues must be addressed from the beginning, starting with how applications and services are developed, built, maintained, tested and ultimately implemented."

About Critical Path, Inc.

Critical Path, Inc. (Nasdaq:CPTH) is the dominant global provider of complete end-to-end Internet messaging and collaboration solutions for wireless, Internet-centric, telecommunication and corporate businesses. Through its allsourcing strategy, Critical Path is the only advanced messaging provider to offer businesses the flexibility to outsource, midsource or insource all or part of their messaging and collaboration applications. Critical Path has built an industry-leading global infrastructure with data centers connected to key Internet exchange points. Critical Path's technology currently reaches more than 125 million end-users through its customer relationships including more than 25 million wireless devices. Critical Path provides reliable, secure, and scalable e-mail and a flexible suite of enhanced messaging services to partners such as E*TRADE, CompuServe, Network Solutions, U S West, Sprint, France Telecom, British Telecommunications, and ICQ. Critical Path is headquartered in San Francisco, with offices in locations nationwide and in Canada, Germany, England, Ireland, France, Italy, Switzerland, Japan, Brazil and Argentina. More information on Critical Path can be found at www.cp.net.

The statements in this press release relating to matters that are not historical are forward-looking statements. Actual results could differ materially from these forward-looking statements. Risks and uncertainties facing Critical Path are described in its prospectus dated June 1, 1999 and with its periodic filings with the Securities and Exchange Commission (www.sec.gov).

Note to Editors: Critical Path and the Critical Path logo are the trademarks of Critical Path, Inc. All other trademarks are the property of their holders.