ISC2 Names Interim President/CEO.

PALM HARBOR, Fla. -- The International Information Systems Security Certification Consortium Inc. ((ISC)2(R)) today announced it has appointed Rolf Moulton, CISSP, as interim president and chief executive officer. Stephen Doukas, current acting CEO for (ISC)2, will resume his previous role as chief operating officer.

Moulton will serve in this capacity during the company's search for a successor to James E. Duffy, CISSP.

Moulton has been involved with (ISC)2 in various capacities for over 10 years. Re-elected to the board of directors for a second 3-year term in November 2004, he served as treasurer and chairman of the compensation committee, as well as chairman of the nominating committee. In accepting this interim role, Moulton has resigned his seat on the (ISC)2 board of directors and his chairmanship of these committees.

In addition to (ISC)2, Moulton has more than 20 years experience as a chief information security officer at large multi-national organizations, where he has developed, implemented and managed comprehensive information risk and security programs in diverse global, local and government operating environments. His employers have included Unilever, BP America, and the New York City Department of Investigation. He is also a respected author and journal article reviewer and has been involved in IT and various professional security organizations for many years, including serving as a chapter president for the Information Systems Security Association (ISSA).

Duffy, who retired on Feb. 16, 2005, worked as a volunteer for (ISC)2 for many years and served as its chief executive for the last 5 years. In recognition of his many years of dedicated service to (ISC)2, the company's board of directors granted Duffy the designation "CISSP Emeritus" during a recent ceremony held in his honor.

John Colley, chairman of the board for (ISC)2, said: "Jim leaves behind the legacy of a rapidly growing organization that has increased from 3,000 to more than 30,000 members in the last 5 years. Under his leadership, (ISC)2 has made great strides. Rolf's wealth of leadership skills, industry experience and intimate knowledge of the organization give him a unique vantage point that will be key as we transition to new permanent leadership."

Moulton commented: "This is an exciting time for (ISC)2, and I'm proud to be involved in the next phase of its evolution. During this time, I plan to work closely with John Colley and the board to locate a suitable candidate who will meet the dynamic needs of our organization as we embark on the next phase of our growth. With initiatives such as our Year of the Information Security Professional program, which we continue to expand, we're pursuing our mission to support our members through all phases of their careers and to advance the information security profession worldwide."

"Jim has assembled a talented and immensely dedicated team," Moulton continued. "I look forward to working with them and our members to enhance our services and to meet our constituents' changing needs."

The company plans to announce details regarding the president/chief executive officer position, candidate requirements and recruiting process over the next few months.

About (ISC)2

The International Information Systems Security Certification Consortium Inc. ((ISC)2(R)) is the premier non-profit organization dedicated to certifying information security professionals around the world. Founded in 1989, (ISC)2 has certified more than 30,000 information security professionals in more than 100 countries. Based in Palm Harbor, with offices in Vienna, Va., USA, London, Hong Kong and Tokyo, (ISC)2 issues the Certified Information Systems Security Professional (CISSP(R)) and Systems Security Certified Practitioner (SSCP(R)) credentials and related concentrations to those meeting necessary competency requirements. The CISSP(R), the Gold Standard in information security certifications, is the first information technology credential to meet the stringent requirements of ANSI ISO/IEC 17024, a global benchmark for assessing and certifying personnel. (ISC)2 also offers a portfolio of educational products and services based upon (ISC)2's CBK(R), a compendium of industry best practices for information security professionals, and is responsible for the annual (ISC)2 Global Information Security Workforce Study. More information about (ISC)2 is available at www.isc2.org.