Digital Defense Successfully Completes Testing of Information Security Risk Assessment Management Tool

Business Wire, Feb 18, 2008

SAN ANTONIO -- Digital Defense, Inc. (DDI), a provider of information security assessment services and Software as a Service (SaaS) risk management solutions, today announced that testing of its new information security risk assessment management tool has successfully completed. DDI applied OCTAVE Allegro, a methodology to streamline and optimize the process of assessing information risks, developed by Carnegie Mellon Software Engineering Institute (SEI) as the foundation for the information security risk assessment tool.

OCTAVE([R]) is an information security risk assessment methodology, fielded in 2003, and has been deployed in the federal arena. OCTAVE([R]) Allegro, first published in 2007, is an advancement of OCTAVE and is the foundational methodology that serves as the basis for this new management tool.

While SEI does not endorse any product or service, the Institute confirms that DDI tools are consistent with the OCTAVE([R]) Allegro methodology.

Digital Defense will be making this management tool available to organizations that contract for one of the company's Information Security Risk Assessment service offerings. The services, designed to address a wide range of needs in the marketplace, feature Webinar and onsite consulting solutions.

"We are very pleased that SEI has determined our risk assessment management tool is compliant to OCTAVE Allegro," stated Tom DeSot, Chief Compliance Officer of Digital Defense. "Our clients have been looking forward to using this platform to help them manage the large amounts of data that must be collected and analyzed during an Information Security Risk Assessment. Our new tool, in combination with one of our service offerings, greatly eases this management burden for our clients."

Performing Information Security Risk Assessments is now a mandatory requirement by several regulatory agencies. If one of these agencies regulates your firm, the reports generated from the management tool that is available from this collaborative effort between DDI and SEI will demonstrate proof of compliance.

About Digital Defense

Digital Defense, Inc., an approved scanning vendor by the Payment Card Industry (PCI) Security Standards Council (SSC), delivers a comprehensive portfolio of risk management services including information security programs, regulatory compliance solutions, security testing of IT products and security education offerings to financial institutions and enterprises that use Internet Protocol-based technology in their business operations. Digital Defense and its Security Operations team uses proprietary Software as a Service (SaaS) technology and industry best practices to deliver a broad array of services to its clients, which range from small financial institutions to global Fortune enterprises. Frontline[TM], Digital Defense's flagship service portal, provides clients with instant access to a security information management platform that enables independent oversight of their organization's security posture on an autonomous or Digital Defense managed service basis. For more information about Digital Defense, please visit our web site at www.digitaldefense.net or contact us at 888-273-1412.

Reader Contact Information

Digital Defense, Inc., 1711 Citadel Plaza, San Antonio, Texas, 78209
Phone - 210-822-2645, Fax - 210-822-9216
www.digitaldefense.net

Digital Defense and the Shield Logo are Registered Service Marks of Digital Defense, Inc. All other trademarks are the property of their respective owners.