Cybertrust Security Lifecycle Program Employs Risk Management to Improve Information Security Postures; Major Airline Using SLP to Align Information Security Measures to Business Objectives

Business Wire, July 26, 2005

LONDON -- Customers of Cybertrust(R), a global leader in information security services and enabling technologies, are benefiting from the ability to align their information security initiatives with business objectives through the implementation of Cybertrust's Security Lifecycle Program (SLP)(TM). SLP is used to address corporate governance responsibilities, data protection, the management of outsourcing contracts and privacy requirements while keeping up with technology advancements and obligations to internal and external customers and partners.

For Qantas Airways, the ability to maintain an overall view of its IT security arrangements was critical.

"We were looking for a holistic approach to IT security, rather than piecemeal solutions," said Qantas CIO Fiona Balfour. "Cybertrust's Security Lifecycle Program helped Qantas to clearly define the level of security governance, policy, operations, compliance and assurance required of third party service providers to meet our business needs. This now forms the benchmark for our company-wide information security program."

Several government and financials organisations are also using SLP to ensure that information security processes address applicable local and international laws, regulations, national security standards and statutes.

Cybertrust SLP is designed from an information security risk perspective, driven by customers' business objectives and requirements, with repeatable processes providing quantitative results. Cybertrust works closely with customers to determine their risk appetite, produce a risk profile, assess current security controls, and contract a target security baseline that will reduce operational complexity, related vulnerabilities and opportunities for compromise.

"SLP is a unique framework that ensures organisations retain visibility and control of their security service levels under an outsourcer contract," stated Paul O'Rourke, Cybertrust senior vice president and regional general manager, Asia Pacific. "SLP also guides companies in addressing compliance concerns as part of their overarching information security objectives, which allows them to take a proactive, strategic and efficient approach to compliance."

For more information about the Cybertrust Security Lifecycle Program and to download a new Cybertrust SLP White Paper, please visit http://www.cybertrust.com/intelligence/white_papers.html.> About Cybertrust

Cybertrust, Inc. is a global provider of information security, providing a unique mix of processes, products, and people to enable enterprises and government agencies to secure and manage their IT infrastructures. With more than 15 years of proven experience, Cybertrust is the first company to comprehensively address the entire security lifecycle by providing offerings for each of the four critical security domains of identity, threat, vulnerability, and compliance management. These offerings leverage Cybertrust's unmatched security knowledge and intelligence gathering resources, which includes ICSA Labs(R), the global leader in information security product certification. Headquartered in Herndon, Va. with more than 30 offices around the globe, Cybertrust is the trusted advisor for information security to more than 4,000 customers worldwide. To learn more, please visit http://www.cybertrust.com.