Technology reduces the cost and complexity of managing regulatory requirements

WALTHAM, Mass., Jan. 15, 2007 – Aveksa Inc., a leader in automated security compliance, today announced the availability of the second major release of Aveksa Compliance Manager. The company’s flagship enterprise software enables IT security and compliance teams to meet the requirements of Sarbanes Oxley, HIPAA, GLBA,Basel II and other security and privacy regulations.

Aveksa Compliance Manager is the only security compliance management solution thatautomates access rights monitoring and compliance reporting across the enterprise. It helps organizations determine who has access to what information assets, whether the access rights and roles are appropriate, and if security policies and compliance objectives are met regardless of where the information is stored or who controls it. The solution delivers enterprise-wide visibility across mainframe, midrange, Web and PC environments by monitoring entitlements to applications and resources such as SAP, Oracle Financials, PeopleSoft, LDAP-based directories, ACF/2, RACF, TopSecret, and AS/400.

"With thousands of employees and a broad range of applications and systems, it is critical that we have visibility into entitlements and roles, and have an automated, end-to-end reporting, certification and remediation process to ensure compliance with Sarbanes Oxley and other regulations," said Thomas Dunbar, global IT chief security officer, XL Global Services, Inc. "The Aveksa Compliance Manager combines all of these capabilities and should help us serve our key business constituents, automate controls assurance, and ensure that risk and compliance management is an integrated part of our IT fabric."

Aveksa Compliance Manager makes it easy to automate entitlement and role reviews,generating reviews that are tailored to the needs of the business. A closed loop workflow guarantees accountability while ensuring that entitlement and role changes can be tracked and audited. Reporting, certifications, and business rules leverage an integrated identity warehouse to deliver an automated end-to-end workflow that supports security compliance.

"A typical large organization manages millions of individual access rights, spread across many IT systems. These privileges change regularly to reflect business demands and can pose a security nightmare. Identity management and provisioning solutions, which typically cover a subset of applications, are only part of the solution. IT organizations need to automate security compliance monitoring and have visibility into fine-grained entitlements and roles, and implement a closed loop entitlement review process to fully meet compliance requirements," said Lori Rowland, senior analyst, the Burton Group.

Aveksa Compliance Manager is a key component for an organization to achieve sustainable compliance. Its rules, reports, certifications and analytics can be linked to external documentation of security policies and compliance controls. Direct integration with IT governance, risk and compliance platforms ensures that accurate and up-to-date security compliance status is always available to those who need it.

"We have heard across the board from large financial institutions to smaller organizations that the most challenging aspect of security compliance is managing a process which includes thousands of manual tasks," said Deepak Taneja, CEO of Aveksa. "Over 50 percent of security compliance tasks are associated with entitlement review and reporting. Aveksa Compliance Manager is the only solution to fully automate the review process."

About Aveksa
Aveksa delivers the only enterprise-class security compliance management solution that automates access rights monitoring and compliance reporting. Aveksa enables IT security and compliance teams to balance the pressures of managing company security and meeting corporate compliance objectives while drastically reducing the costs associated with attaining sustainable compliance.

Aveksa was founded by IT security and compliance experts who understand how to help organizations implement solutions for dealing with regulations such as Sarbanes-Oxley, HIPAA, GLBA, and Basel II. Aveksa headquarters are located in Waltham, Mass. For more information please contact Aveksa at www.aveksa.com.

About XL Global Services Inc.
XL Global Services is part of XL Capital Ltd, www.xlcapital.com, ticker symbol XL,Through its operating subsidiaries, it is a leading provider of insurance and reinsurance coverages and financial products to industrial, commercial and professional service firms, insurance companies, and other enterprises on a worldwide basis.