NATO Deploys Guidance Software EnCase® Information Assurance for Forensic Approach to Computer Security Incident Response and Classified Spillage Auditing

Business Wire, Feb 25, 2008

Leading Technology Provides NATO with Accurate View of Incidents on Thousands of Systems within Seconds

PASADENA, Calif. -- Guidance Software Inc. (NASDAQ: GUID), The World Leader in Digital Investigations[TM], today announced that the NATO Computer Incident Response Capability (NCIRC) has deployed Guidance Software's EnCase[R] Information Assurance technology to deliver comprehensive, forensic-level analysis across the network and automate crucial Information Assurance processes, such as incident response and remediation and classified spillage auditing. The software provides NATO's Communication and Information Systems Agency with an immediate and accurate view of what has happened on any one of its thousands of systems within seconds of an incident occurring, even if that system may be located thousands of miles away. It can now also proactively search for and audit classified sensitive information and instantly locate it on its networks.

NATO (NCIRC) has deployed a large scale cyber defense project leveraging best-of-breed solutions for intrusion detection and prevention systems, security information and event management and automated incident response to create an integrated technology solution that significantly enhances its ability to counter today's online threats and attacks.

"EnCase Information Assurance has enabled us to do in seconds what used to take us weeks," said Mr. Ian J. West, Director, NCIRC Technical Centre. "It delivers a unique capability at our fingertips that would have otherwise taken massive in-house resources to achieve. We also now have the ability to assess every aspect of our systems and in working with Guidance Software's professional services team, we have been able to implement strict standard operating procedures to help mitigate risk and knowledge transfer to ensure that we are self sufficient in our use of the technology. Furthermore, because EnCase[R] is non-disruptive, we are able to respond to incidents without taking systems offline or imposing unnecessary downtime, which further helps mitigate our risk."

Guidance Software's EnCase Information Assurance further enhances the EnCase[R] Enterprise investigative infrastructure by automating crucial IA processes, such as classified spillage auditing, incident response and even remediation. Analysts can scan thousands of nodes at unprecedented speeds, understand at the deepest level what is occurring on those machines, and if necessary, remediate improper activity without disrupting operations. With EnCase Enterprise and EnCase Information Assurance, organizations experience significant cost and time savings and enable compliance with critical mandates.

About Guidance Software (GUID)

Guidance Software is recognized worldwide as the industry leader in digital investigative solutions. Its EnCase[R] platform provides the foundation for government, corporate and law enforcement organizations to conduct thorough, network-enabled, and court-validated computer investigations of any kind, such as responding to eDiscovery requests, conducting internal investigations, responding to regulatory inquiries or performing data and compliance auditing - all while maintaining the integrity of the data. There are more than 20,000 licensed users of the EnCase[R] technology worldwide, and thousands attend Guidance Software's renowned training programs annually. Validated by numerous courts, corporate legal departments, government agencies and law enforcement organizations worldwide, EnCase[R] has been honored with industry awards and recognition from eWEEK, SC Magazine, Network Computing, and the Socha-Gelbmann survey. For more information about Guidance Software, visit www.guidancesoftware.com.