Foundstone Executives to Speak at Gartner IT Security Summit 2003; Experts to Counsel Security Officers to Avoid the ''Sky is Falling'' Approach to Security.

Business Editors/High-Tech Writers

Gartner IT Security Sector Summit 2003

MISSION VIEJO, Calif.--(BUSINESS WIRE)--May 30, 2003

Foundstone, experts in strategic security, today announced that President and Chief Technology Officer Stuart McClure, and Director of Computer Forensics Kevin Mandia, will be speaking at the Gartner IT Security Summit being held June 2 - 4 at the Washington Hilton Hotel in D.C. During the Monday, June 2 panel discussion at 4:30 p.m. ET on the Intrusion Detection, Response + Prevention, Viruses + Forensics track, McClure will discuss intrusion prevention and vulnerability management for the energy, water and utilities sector, and Mandia will address incident response and forensics for the transportation sector.

The panel will examine the implications of security trends and issues facing these industries including which IT/security tools and methodologies are most effective; what IT/security tools and methodologies are emerging for intrusion detection and prevention; the most effective means of protecting infrastructure that is geographically widely distributed; and how to prevent attacks or theft of vital supply chain data in shared web portals.

"Critical infrastructure companies such as those in the energy, water and utilities sector need to be aware that 20 percent of security vulnerabilities represent 80 percent of the risk. Therefore, it is essential that these companies not only identify their critical assets and the vulnerabilities within those systems, but establish plans to protect them," commented McClure. "With cyber threats growing exponentially each year, it is crucial that organizations continue to learn about new security approaches and security trends. Now is the time to implement a proactive approach to mitigate risk."

McClure is widely recognized for his extensive and in-depth knowledge of security products and is considered one of the industry's leading authorities in information security. In 1999, he took the lead in authoring Hacking Exposed: Network Security Secrets and Solutions, the best-selling computer security book ever sold around the globe.

Mandia provides security consulting and cyber forensics training to Foundstone clients, including top federal agencies such as the FBI's National Infrastructure Protection Center and the Air Force Office of Special Investigations (AFOSI), in addition to state law enforcement and Fortune 500 companies. He also leads a team of computer forensic specialists who have responded to more than 25 computer security incidents at e-commerce and financial service organizations in the past year. In his career, he has trained more than 350 FBI agents as well as personnel from the State Department, CIA, NASA, the U.S. Postal Service, the Air Force, and other government agencies.

"The security challenges facing the transportation industry are increasing due to growing pressures on homeland security," stated Mandia. "Those on the first line of cyber defense for companies in charge of the nation's transportation systems need to create a consistent incident response plan throughout the organization in the event of a security breach. It is those first few minutes after an attack which can dictate the size of the aftermath."

In addition to participating in these track sessions, Stuart McClure and Kevin Mandia will be available for interviews during the show. Stop by Foundstone at booth number 520 to schedule a time to speak with them.

The Gartner IT Security Sector Summit 2003 is the combination of Gartner's established Enterprise IT Security Conference and the SECTOR 5 Summit on cyberterrorism and critical-infrastructure protection. The three-day summit will explore critical issues, best practices and case studies through panel discussions with top experts from the private and public sectors. Also included will be breakout sessions tailored to the five critical infrastructure sectors: transportation; energy, utilities and water; banking and financial services; telecommunications and information services; and vital health, safety and emergency services. For full details of the event, visit www.sector5.biz.

About Foundstone

Foundstone(R) Inc., experts in strategic security, offers a unique combination of software, services, and education to help organizations continuously and measurably protect the most important assets from the most critical threats. Through a strategic approach to security, Foundstone identifies and implements the right balance of technology, people, and process to manage digital risk and leverage security investments more effectively. The company has one of the most dominant security talent pools ever assembled, and has authored ten books, including the best seller Hacking Exposed. Foundstone is headquartered in Orange County, CA, and has offices in New York, Washington, D.C., and Seattle. For more information about Foundstone and Foundstone Enterprise Risk Solutions, visit www.foundstone.com, or call 877.91.FOUND within the U.S., and 949.297.5600 outside the U.S.