New Version of Ecora Enterprise Auditor Simplifies Sarbanes-Oxley Compliance

Business Wire, March 14, 2005

PORTSMOUTH, N.H. -- Automatically Prepare Sarbanes-Oxley Mandated Documents with the "Sarbanes-Oxley Report Pack"

E[acute accent]Ecora Software, the leader in total configuration management software, is today announcing the latest version of its Enterprise Auditor software suite, which includes a new Sarbanes-Oxley (SOX) Report Pack that helps IT staffs to simplify the preparation of documents to prove compliance with SOX mandates in an ongoing and timely manner. E[acute accent]"Companies are just now learning of the time and costs associated with the internal controls provisions stated under Section 404 of the Sarbanes-Oxley Act," said Alex Bakman, founder and CEO of Ecora. "With Enterprise Auditor, we've made multi-platform configuration reporting such a simplistic task that our customers are moving from a reactive to a proactive mode in how they approach SOX compliance." E[acute accent]Ecora developed the SOX Report Pack for Enterprise Auditor to help companies understand what exactly constitutes valid internal controls as specified by SOX. The SOX Report Pack gives users a working template of IT internal controls and automates data collection and reporting - saving them valuable time in the process. The SOX Report Pack includes more than 25 reports in the following categories that can be used to test IT controls and demonstrate compliance:

E[acute accent]--Confirm Access Rights

E[acute accent]--Ensure Ability to Track User Activity

E[acute accent]--Ensure Only Required Applications and Services

E[acute accent]--Ensure Password Policies

E[acute accent]--Ensure Security Configurations

E[acute accent]--Protect Against Viruses, Malicious Code, and Unauthorized Software

E[acute accent]"There is no one-size-fits-all checklist showing how to comply with SOX," said Scott Carpenter, Enterprise Auditor product manger for Ecora. "So we worked with our customers to build examples of how to demonstrate the integrity of systems that house sensitive information. The resulting SOX Report Pack is resulting in dramatic time saving by identifying and developing the reports users need for SOX compliance right out-of-the-box." E[acute accent]Randy Samora, systems administrator with Landata Technologies, is particularly appreciative of the ways Enterprise Auditor saves him time. "We've been using Enterprise Auditor for awhile so we were well prepared to meet SOX requirements. However, Enterprise Auditor does a lot more and also helps us on a daily basis. When we had an event that changed all the permissions on a server, we were able to use the Ecora software to quickly recover and identify all the appropriate permissions. Situations such as that demonstrate that we have the necessary controls for SOX compliance."

E[acute accent]There's more to Enterprise Auditor

E[acute accent]The latest version of Enterprise Auditor offers an unmatched set of modules that collect hundreds of configuration settings specifically for each of the platforms it supports. This includes Windows servers and workstations, HP-UX, IBM AIX, Sun Solaris, Red Hat Linux, Novell Netware, Novell Directory Services, Cisco, MS-SQL, Exchange, IIS, Active Directory, and Oracle. It also has an updated Lotus Domino module with added functionality that provides easy access to reports, as well as automatic alerting and archival capabilities. E[acute accent]Enterprise Auditor features a unique change tracking capability that can provide a single report that identifies changes to all supported platforms. An intuitive interface allows users to simply drag-and-drop the configuration settings on which they need to report, while Visio diagrams are generated that provide network illustrations of the systems and configurations for the reports. E[acute accent]Acknowledging the increased importance of security in network environments, Enterprise Auditor's updated Windows module now collects critical configuration settings for Terminal Services, Scheduled Jobs, and SNMP settings - the very setting that are the focus of many security audits. Similarly, the suite's Citrix module collects data on ICA Keep Alive farm settings, Citrix connections, Data Store settings, the ICA Client Update Databases, and the Citrix SSL Relay Configuration. E[acute accent]The Ecora Enterprise Auditor suite with the new SOX Report Pack is available immediately. Enterprise Auditor for Windows Servers and Enterprise Auditor for Unix/Linux Servers are priced at $995 per server. For additional information contact Ecora at 877-92ecora (923-2672), e-mail sales@ecora.com, or visit www.ecora.com.

E[acute accent]About Ecora Software

E[acute accent]Ecora provides a total configuration management solution that automates multi-platform configuration reporting, change monitoring, and patch management. Ecora's solutions enhance efficiency and reduce the costs associated with IT compliance, business continuity, and vulnerability assessment while providing the means to monitor change and plan for recovery. Ecora supports enterprise platforms from Cisco Systems, IBM/Lotus, Microsoft, Novell, Oracle, HP, IBM, Sun Microsystems, Red Hat, and Citrix. For more information about Ecora Software, visit www.ecora.com.