Vormetric and Coalfire Systems Partner to Provide Half Day Workshops on the Payment Card Data Security Standard (PCI DSS)

Market Wire, July, 2006

Vormetric, a leading provider of security solutions for protecting sensitive data from unauthorized access and PCI Qualified Data Security Company (QDSC) Coalfire Systems, today announced their educational workshop event Demystifying the (PCI) Digital Dozen: Compliance Strategies and Risk Mitigation. An identical morning and afternoon session will be offered. Sessions will take place at the Edgewater Hotel on July 27, 2006 in Seattle, WA.

These sessions are designed for IT Directors, Chief Security and Privacy Officers, CIOs, CFOs and anyone involved with regulatory compliance or security tasks related to credit card data. Attendees will get first-hand advice from PCI experts on these topics:

--  What the "state-of-the-state" of PCI DSS means for you and your
    business
--  "How Tos" that offer practical insights and guidance on implementation
    of the PCI standard
--  Real world best practices on how companies 'process, transmit, and
    store' cardholder data based on a case study from PEMCO Technology Services
    (PTSI)  CIO Charles Elledge
--  The truth about data encryption, access controls to data and the PCI
    DSS
    

Session Speakers:

--  Kennet Wesby, CIO and Co-Founder, Coalfire Systems
--  Charles Elledge CIO, PEMCO Technology Services (PTSI)
--  Dr. Heather Mark, CISSP, Director, Industry Marketing, Vormetric
    

"Presenting with Visa CISP and PCI QDSC experts like Coalfire Systems and enterprises like PTSI who have been through the PCI compliance, we are able to teach users the items they need to help enable PCI compliance," said Dr. Heather Mark, Vormetric's Director of Industry Marketing.

"Our experience within PCI allows us to provide highly effective security solutions for our clients," said Kennet Westby, CIO/Co-Founder Coalfire Systems. "By partnering with Vormetric, we can help make sure enterprises are fully aware of the important data encryption requirements in the PCI and ultimately help users effectively mitigate risk and achieve compliance."

When: Thursday, July 27, 2006
8:00 am - 11:30 am or 12:00 pm - 4:00 pm
Where: Edgewater Hotel
2411 Alaskan Way
Pier 67 Seattle, WA 98121
(206) 728-7000
(Valet Parking and breakfast or lunch will be provided)

The PCI DSS (Payment Card Industry Data Security Standard) is a compliance initiative agreed upon by the payment card industry (Visa USA, MasterCard International, Amex and Discover) that requires best-practice security standards for merchants and service providers that handle payment card information. The standards require on-site audits, self-administered audits, and network scanning by merchants and service providers on various levels according to the volume of transactions each facilitates. As a PCI QDSC, Coalfire Systems is a qualified assessor/auditor for PCI and has successfully certified PCI compliance for hundreds of service providers, merchants, and payment applications.

About Vormetric

Vormetric is a leading provider of solutions for protecting enterprise information from unauthorized access or theft. The company's CoreGuard system is a single, scalable and manageable system for data privacy and protection that enables businesses and government agencies to control who, what, when, where and how people can access sensitive information. CoreGuard protects intellectual property and enables enterprises to comply with increasingly strict data privacy and system integrity regulations. Founded in 2001, Vormetric is a privately held company with headquarters in Santa Clara, California. More information is available at www.vormetric.com

Vormetric, the Vormetric logo, CoreGuard and MetaClear are trademarks of Vormetric Inc. All other trademarks are the property of their respective owners.

About Coalfire Systems

The Coalfire Systems, Inc. team members are specialists in IT systems management and information security. We are expert at the requirements of ITIL, Gramm-Leach-Bliley, Sarbanes Oxley, HIPAA, FFIEC audit guidelines, VISA CISP (PCI) and other security-related regulations. Our process has been validated by hundreds of assessments and audits at government, financial and healthcare organizations to help ensure they meet both best practices and regulatory compliance, and the highest levels of security. To maintain objectivity, we are hardware and software vendor neutral. In addition to our extensive client list, Coalfire is recognized nationally as experts in information management and security matters. Currently, at the invitation of the Secret Service, Coalfire is serving as a member of a committee of national experts attempting to define metrics for quantification of losses due to cyber crime. We also train FDIC, OTS and NCUA examiners on assessment procedures for secure financial systems.

About PEMCO Technology Services, Inc (PTSI)

PTSI is a pass-through processor for financial institutions that choose in-house credit, debit, and ATM processing. PTSI currently supports more than 230 financial institutions nationwide and provides roughly 350,000 authorizations and 330,000 monetary transactions per day. PTSI has demonstrated compliance with the Payment Card Industry Data Security Standards.