FDRERASE is First z/OS Disk Utility to Earn Australian ''DSD'' Certification as EAL2+ Security Erase Solution.

LITTLE FALLS, N.J. -- INNOVATION Data Processing, today is announcing that FDRERASE V5.4 L50 is the first disk utility for the IBM z/OS environment to earn a place on the Australian Defense Signals Directorate (DSD) Approved Products List as a Media Sanitisation product with a conformance claim of EAL2+. "FDRERASE today, is the only DSD certified solution available for securely erasing disks (DASD) in z/OS environments. FDRERASE

V5.4 L50, a certified Data Protection solution on the US CCEVS Validated Products List, has concurrence that the erasure techniques FDRERASE employs for Secure Erase satisfy the requirements of the US Department of Defense directive on the subject. DSD certification of compliance with Australian Department of Defense guidelines for erasing computer disks means that FDRERASE is now also approved for use by Australian and New Zealand Government departments and agencies," explains Thomas J. Meehan, INNOVATION Data Processing, Vice President of Advance Technology.

According to the Australian DSD certification description FDRERASE is an application that runs under the IBM z/OS operating system on a mainframe computer providing two DSD security validated disk erasure functions: ERASE and SECUREERASE both of which ensure the risk of any person successfully accessing residual data, if any remains, is appropriate to the value of that data. FDRERASE also provides a DSD security validated audit function (VERIFY) enabling a user to confirm that the physical tracks of a disk (DASD) have been overwritten sufficiently that no residual information remains.

"You expect Defense and National Security agencies to have strict rules," Meehan went on, "but now all around the world industry guidelines, state codes, and national legislation make it clear that sensitive information must be removed from disks prior to disposal or reuse. Institutions in the US subject to HIPAA (Health Insurance Portability and Accountability Act) must ensure sensitive personal identity information is cleared from equipment and media prior to disposal or reuse. Japan's JPIPA (Personal Information Protection Act of 2003) imposes similar obligations on institutions there. The US GLBA (Gramm-Leach-Bliley Act) imposes criminal penalties on financial institutions that fail to preserve the privacy of current or legacy client financial data. The international Payment Card Industry Data Security Standard requires members (e.g. MasterCard, Visa, American Express, Diners Card, Discover and JCB), banks, merchants and merchant service providers to enact data disposal plans to purge electronic media so cardholder data cannot be reconstructed. It is very clear internationally, commercial institutions as well as government agencies have the same obligations to erase data when disposing of disk storage systems and when leaving a DR site, as they do to protect that data from unauthorized access while it's in their possession."

"FDRERASE because of this," according to Meehan, "is especially popular with banks, card payment service providers, educational institutions, financial intuitions, government agencies, hospitals and insurance companies all of which have legislated Personal Identity Information Protection obligations, to securely erase data when leaving a DR site or disposing of disk storage systems. Always the fastest way to securely erase data in these circumstances and already a Validated Data Protection solution in the US, the Australian and New Zealand DSD EAL2+ certification now puts FDRERASE V5.4 L50 squarely in the forefront when it comes to meeting international levels of data protection compliance."

FDRERASE V5.4 L50 is generally availability worldwide from INNOVATION Data Processing, its subsidiaries and channel partners. FDRERASE is available in Australia, New Zealand and South East Asia from Computer Supervisory Services of Sydney, Australia.

Further information specific to Australia, New Zealand and South East Asia is available by e-mailing [e-mail] calling [phone].

Further information is available to US and International queries by e-mailing [e-mail]

About FDRERASE Security Functions

ERASE

A secure disk erasure is actually performed by overwriting sufficiently to make any original data unrecoverable. ERASE, by default, overwrites a volume once making all data unrecoverable to any normal program that uses conventional z/OS access.

SECUREERASE

An FDRERASE SECUREERASE overwrites a volume a minimum of three times (optionally up to eight). The multiple overwrites rendering the original data unrecoverable, even by sophisticated laboratory techniques applied to hard drives removed from a disk storage system.

VERIFY

The FDRERASE audit function VERIFY by default samples a percentage of a volume's tracks to insure that they have been erased, or if requested can verify all of the tracks on an entire volume.

About INNOVATION Data Processing

The leading independent software vendor in the world today, providing business data protection, business resiliency and nondisruptive business continuance solutions for IBM zServer z/OS, Linux on zServer, UNIX on zServer and OS/390 attached enterprise disk storage, as well as for Windows, UNIX and Linux, SAN, NAS and LAN distributed disk storage. Further information on INNOVATION Data Processing and FDRERASE is available at http://www.innovationdp.fdr.com/products/fdrerase/index.cfm

About Australian DSD FDRERASE V5.4 L50 Security Evaluation Listing

Certification by the Australasian Information Security Evaluation Program (AISEP) is a standard prerequisite to becoming an Australian Defense Signals Directorate (DSD) Approved Product (DAP) and subsequent approval for usage in accordance to the Australian Government's IT Security Manual ACSI 33. The DAP listing of FDRERASE V5.4 L50 is located at http://www.dsd.gov.au/infosec/evaluation_services/epl/media_sanitisati on/FDRErase.html (Due to its length, this URL may need to be copied/pasted into your Internet browser's address field. Remove the extra space if one exists.)

About the Australasian Information Security Evaluation Program (AISEP)

Australian and New Zealand public and private sectors are increasingly reliant on information technologies. The Australasian Information Security Evaluation Program (AISEP) is the Australian Defense Signals Directorate (DSD) certification body. AISEP uses the internationally recognised criteria Common Criteria (CC) ISO 15408 and the Information Technology Security Evaluation Criteria (ITSEC). Common Criteria Mutual Recognition is the result of a multi-year effort by the governments of the United States, Canada, France, Germany, the United Kingdom, Australia, New Zealand, Italy, Spain, the Netherlands, Norway, Finland, Greece and the State of Israel to develop harmonized security criteria for IT products. Further information on the Australasian Information Security Evaluation Program (AISEP) is available at http://www.dsd.gov.au/infosec/evaluation_services/aisep_pages/aisep.ht ml (Due to its length, this URL may need to be copied/pasted into your Internet browser's address field. Remove the extra space if one exists.)

About the US Common Criteria Evaluation and Validation Scheme (CCEVS)

Evaluations of commercial products in the US are conducted under the National Information Assurance Partnership (NIAP) Common Criteria Evaluation and Validation Scheme (CCEVS). The CCEVS Validation Body is managed and staffed by the National Security Agency (NSA).

Further information on the Common Criteria Evaluation and Validation Scheme (CCEVS) is available at http://niap.bahialab.com/cc-scheme/st/ST_VID10064.cfm FDRERASE is a service mark, trademark and/or registered trademark of INNOVATION Data Processing Corporation. IBM and z/OS are trademarks or registered trademarks of International Business Machines Corporation. All other service marks, trademarks or registered trademarks are the property of their respective owners.