Vigilar Earns MasterCard International Site Data Protection Vendor Approval to Perform Credit Card Network Security Scans; Vigilar Guarantees Merchants PCI Data Security Scanning and Compliance Remediation in Time for June 30, 2005 Deadline

Business Wire, May 16, 2005

ATLANTA -- Vigilar, Inc., the leading information security consulting firm, today announced that it has earned its Compliant Security Vendor approval under MasterCard International's Site Data Protection (SDP) program. As a MasterCard approved vendor, Vigilar is allowed to help online merchants evaluate the security of their Web sites that store MasterCard account data, and achieve compliance with the MasterCard SDP program that is in accordance with the PCI Data Security Standard.

The PCI Data Standard combines components of MasterCard's SDP security compliance program and Visa's Cardholder Information Security Program (CISP) to create common industry security requirements for storing, processing or transmitting credit cardholder data. These standards are internationally recognized by most major card companies, including American Express, Diners Club, Discover Card and JCB Card, as the benchmark for cardholder data security and are intended to ensure that cardholder data is appropriately protected at all points within the course of a transaction.

MasterCard recognized Vigilar specifically for its SDP related services. Vigilar achieved approved status by proving its ability to detect, identify and report vulnerabilities common to flawed Web site architectures and configurations. These vulnerabilities, if not patched in actual merchant Web sites, could lead to an unauthorized intrusion. By proactively identifying and providing the opportunity to remedy such vulnerabilities, SDP approved products offer a means for reducing risk of intrusion and data compromise.

Vigilar President and CEO, Palaniswamy (Raj) Rajan, said, "Vigilar's entire business is focused on information and network security management. Keeping our clients' data and networks protected is our top priority all day, every day. It was a natural progression for us to extend our services into the credit card scanning and remediation arena where the logistics of such security measures tap directly into our expert core competencies."

As opposed to other certified vendors who only offer merchants self-service network scanning and provide suggestions for remediation, Vigilar conducts the network scan for the merchant and a Vigilar support security analyst reviews the results and provides a customized report detailing the steps necessary for remediation based on the merchant's technology requirements. Vigilar then conducts the remediation to rectify any found vulnerabilities, ensuring that the merchant is SDP and PCI compliant.

"The Site Data Vendor Compliance Program reflects MasterCard's ongoing commitment to helping our customer financial institutions and online merchants evaluate and improve the security of their Web sites in a timely and affordable manner. The end result we are striving for -- improved overall channel security -- is a win-win for all parties involved," said Steve Orfei, senior vice president and head of the MasterCard e-Commerce Center of Excellence.

The SDP Compliance Testing program is an expansion of MasterCard's Site Data Protection Program(TM), a comprehensive, proactive and cost-effective set of global e-commerce and financial security services designed to help protect the Web sites of its member financial institutions, online merchants and other payment processors holding MasterCard account information.

About Vigilar

Vigilar is the leading information security consulting firm assisting clients in protecting their company against internal and external threats, and is focused on meeting the customer's budget and business requirements while ensuring compliance to government regulations. With a sole focus on information security and a team of highly skilled industry experts, Vigilar partners with the leading security technology innovators to ensure that our clients stay ahead of the technology curve.

Headquartered in Atlanta, Vigilar offers end to end security expertise including regulatory compliance services, risk assessments, IT security audits, SmartDefender(R) managed security services, security architecture design, product selection and delivery, implementation services, technical support and training. Its client list includes Fortune 500 corporations and small and emerging enterprises in industries such as healthcare, finance, manufacturing, hospitality, financial services, telecom, utilities and federal, state and local government agencies.