Telos Announces Availability of Xacta IA Manager Service Pack 5 with Support for New FISMA Reporting Requirements; Service Pack 5 Provides Integration with eEye Retina and Improved Usability and Administration Features

Business Wire, Sept 20, 2005

ASHBURN, Va. -- Telos Corporation today announced the general availability of Service Pack 5 for Xacta IA Manager(TM), the company's flagship offering for security compliance and risk management. Xacta Corporation, a wholly owned subsidiary of Telos and a leading supplier of government-validated secure enterprise solutions, developed Xacta IA Manager to automate many business processes for IT security management. Service Pack 5 builds upon Xacta IA Manager through upgrades to usability, administration and ease of licensing. It also integrates with eEye's Retina(R) Network Security Scanner.

Xacta IA Manager establishes a centralized security management platform that facilitates compliance assessment, continuous risk and compliance management, and security process enforcement. In addition to identifying risks, Xacta IA Manager automatically initiates corrective actions to protect systems.

Enhancements in Service Pack 5 include:

--  Improved perpetual and bundled licensing support

        In addition to buying Xacta IA Manager for individual systems,
        customers can now purchase Xacta IA Manager in one of four
        predefined server sizes:

        --  Small Server: Xacta IA Manager server license that allows
            for up to 25 systems and unlimited users.

        --  Medium Server: Xacta IA Manager server license that allows
            for up to 50 systems and unlimited users.

        --  Large Server: Xacta IA Manager server license that allows
            for up to 100 systems and unlimited users.

        --  Unlimited Server: Xacta IA Manager server license that
            allows for unlimited systems and unlimited users.

        These server bundles are designed to fit a wide range of
        organizational sizes, from small to very large. All of these
        server configurations are sold as perpetual licenses with
        annual maintenance.

    --  More flexible product administration

        Xacta IA Manager perpetual license customers can now,
        on-the-fly, create new projects and new templates without
        registering the system name. This affords a higher level of
        confidentiality and flexibility for Telos' most demanding and
        highly sensitive customers who have a need to tightly hold the
        names of their systems.

    --  2005 FISMA reporting guidelines incorporated

        The updated 2005 Office of Management and Budget reporting
        guidance has been incorporated into the Xacta summary
        compliance and Plan of Action and Milestones (POAM) reports.
        These updates, incorporated into the Service Pack 5 release,
        benefit users of Xacta IA Manager as well as Xacta FISMA
        Accelerator(TM).

    --  Integration with eEye Retina Vulnerability Scanner

        eEye's Retina solution, which identifies network security
        vulnerabilities, delivers a comprehensive network
        vulnerability assessment. Retina identifies and prioritizes
        security threats arising from software vulnerabilities, system
        mis-configurations and policy non compliance. Xacta IA Manager
        can pull information from Retina and incorporate it into Xacta
        IA Manager's comprehensive risk assessment analysis engine.
        This capability will be of particular importance for the
        Department of Defense, and other clients, that use eEye
        Retina.

    --  NIST impact override capability

        According to FIPS-199, agencies must specify the security
        category for systems. While the FIPS-199 process may result in
        a low or moderate system impact level, the system owner may
        choose to implement more stringent controls, and subsequently
        evaluate the system to a higher level. Xacta IA Manager can
        now designate the higher level of security. Xacta IA Manager
        will then perform the security tests and monitoring required
        for systems at the higher threshold. For example, if an agency
        has a system that NIST would define as a low risk, but it
        plays a critical role in a larger business process, the agency
        may want to change the security level to moderate.

    --  Auditing Notifications

In the past, if a subscriber asks to be alerted to a change in risk level or a failed security scan, none of the notifications showed up in the audit trail. Now the agency has an audit trail that includes all of the messages distributed by Xacta IA Manager to alert staff about security holes or potential problems.

The Service Pack 5 is a free upgrade for the more than two dozen federal agencies and commercial enterprises that use the Xacta IA Manager 4.0 line of offerings.

About Telos

Telos Corporation has provided innovative IT solutions and services to the federal government for more than 30 years. Telos and Xacta Corporation, its subsidiary for security solutions, have since 1989 ensured that the government's most security-conscious organizations comply with demanding federal and DoD information security mandates. Xacta's offerings include enterprise IT security management solutions, enterprise security consulting services, secure wireless networking, enterprise messaging, and secure credentialing solutions. Its solutions are represented to the federal government on Telos' GSA schedule. For more information, visit www.telos.com.