Global Energy Company USEC Inc. Chooses Guardium to Secure Enterprise Data and Satisfy Auditing, Governance Requirements.

Appliance-Based Technology Helps NYSE-Traded Company Simplify and Automate Database Activity Monitoring for Oracle & SQL Server - Without Impacting Business Processes

WALTHAM, Mass. -- Guardium, the database security company, today announced that USEC Inc., a NYSE-traded company with 2005 revenues of $1.6 billion, has implemented Guardium's appliance-based solution for real-time database security and automated compliance auditing. USEC is a global energy company based in Bethesda, Md.

The Guardium solution is being used to protect critical data and monitor privileged user activities for the company's enterprise applications, including Oracle Financials, PeopleSoft, and in-house inventory applications running on multiple Oracle and Microsoft SQL Server database servers.

"Guardium's technology was key to helping us pass our SOX audit," said Robert G. Gorrie, Corporate Information Security Manager, USEC. "In the past, we spent hours and hours reviewing logs, but we didn't have real-time controls or the detailed information required by our auditors. We also tried agent-based change control solutions, but they didn't work. The Guardium system gives us both real-time alerting and granular audit reporting while automating the entire process. This helps us meet our auditors' requirements while saving us several hundred hours a year in staff time."

In addition, Gorrie says that Guardium's passive, network-sniffing approach was easy to implement because it does not impact performance or require changes to applications or databases. The technology also simplifies compliance by providing a single centralized, cross-platform solution for all of the company's database platforms and geographical locations.

USEC purchased and implemented Guardium's solution in late 2005 to provide real-time controls that proactively identify any unauthorized database changes that could affect the integrity of its financial data. For example, alerts are immediately generated whenever changes are made to critical tables and whenever database applications are patched. In addition, the Guardium solution tracks all changes down to the SQL statement level and stores this fine-grained audit information in a secure, tamper-proof repository, allowing IT security managers to easily reconcile all changes with approved work orders from its corporate change tracking system.

Guardium's patent-pending S-TAP[TM] (software tap) technology is also used to monitor "back-door" local access (non-network connections) by database administrators, such as console, shared memory, and named pipe connections. In addition, USEC also uses the Guardium solution to monitor corporate policies prohibiting the use of unauthorized applications, such as developer tools, from accessing critical production databases, which could also affect the integrity of its enterprise data.

"We've helped thousands of security, auditing, and data management professionals secure their data while reducing the cost and effort of compliance," said Ram Metser, Guardium CEO. "By working closely with forward-thinking organizations like USEC, we've continually enhanced our technology over the years to deliver a practical solution that meets the real-world needs of customers like them in all types of industries worldwide."

About Guardium

Guardium delivers the most widely-used solution for database activity monitoring, security, and auditing. Founded in 2002, Guardium was the first company to identify the core data security gap and bring to market the only out-of-the-box solution that both protects databases in real-time and automates the entire compliance auditing process.

Guardium's investors include Cisco Systems and leading venture capital firms. The company is a member of IBM's prestigious Data Governance Council and has partnerships with Oracle, IBM, Microsoft, EMC, HP, and Sybase. For more information, please visit www.guardium.com or call 781-487-9400.

Copyright [c] 2006 Guardium. All rights reserved. Information in this document is subject to change without notice. Guardium, SQL Guard, Safeguarding Databases and S-TAP are trademarks of Guardium, Inc. All other trademarks and trade names are the property of their respective companies. Copying and redistribution of this material is expressly permitted by the copyright owner.