SurfControl On-Demand Services Demonstrates Continued Excellence in Information Security Management with Industry ISO 27001 Certification

Business Wire, July 17, 2007

SCOTTS VALLEY, Calif. -- SurfControl (LSE: SRF), a leading provider of global on-demand, network and endpoint IT security solutions, today announced its on-demand services, MailControl and WebDefense, have gone through the stringent review process and have been certified to ISO 27001 by SGS UK Ltd. This certification is awarded to solutions that comply with industry best practices and is a key component in helping to meet U.S. legislative and regulatory requirements.

ISO 27001 certification gives confidence to management, business partners, customers, and auditors that SurfControl is serious about information security management. It provides greater information security assurance, because the standard is specifically designed to address current best practices in information security and nothing else.

"ISO 27001 standards provide best practice guidance on protecting the confidentiality, integrity and availability of the information that our customers require", said Dave Tripier, senior vice president of product management. "This certification signifies SurfControl's continued dedication to provide best-of-breed Internet security solutions."

ISO 27001, which is widely recognized as an information security standard amongst security professionals, is an information security management system (ISMS) standard published in October 2005 by the International Organization for Standardization and the International Electro-technical Commission. It is currently the only certifiable security governance standard.

"SurfControl is a trusted name in security, and with the ISO 27001 certification we guarantee our services meet best-practices standards," said Tripier.

About SurfControl

SurfControl provides a portfolio of security solutions to protect our customers from Internet threats, deliver business and regulatory compliance, and enable business continuity. SurfControl believes that security should be treated as a science, delivering protection at multiple points -- "in the cloud" with on-demand security services, on the network with software and appliances, and on the desktop and mobile client. All of SurfControl's solutions for Web, e-mail and endpoint security are backed by industry-leading threat detection technologies, delivered by SurfControl's Global Threat Experts who work 24/7 to provide customers with dynamic zero-day protection. The company protects more than 16 million users and over 25,000 customers worldwide, and employs more than 600 people in offices across Europe, the Americas, and Asia/Pacific. For further information and news on SurfControl, please visit www.surfcontrol.com.