Integration Enables Enterprises Using IBM Tivoli Identity Manager to Ensure Corporate Security Policies and Access Compliance Objectives are Being Met

WALTHAM, Mass.—May 5, 2008—Aveksa, Inc., the market-leading provider of enterprise access governance solutions, today announced that it has been validated as “Ready for IBM Tivoli Software” for its integration of the Aveksa 3 Access Governance Platform with IBM Tivoli Identity Manager. Aveksa enables enterprises to easily unify and certify user roles and user accounts controlled by IBM Tivoli Identity Manager with identity, entitlement and role information from other sources. Using Aveksa, organizations can implement an automated process for access change requests and remediation of access rights violations that result from a certification. Organizations using Tivoli Identity Manager can now eliminate previously manual and error-prone processes through Aveksa’s automated access certifications, remediation and reporting to achieve sustainable compliance and reduce access risk across the enterprise.

“As a customer of both companies, we believe the integration between Aveksa and IBM Tivoli Identity Manager would enable access governance to be tied directly to access enforcement in our environment. This would benefit CIGNA’s deployment of these two technologies by simplifying access change management while enabling the remediation of access rights violations and the validation of such remediation through a closed-loop system,” said Alyson Ruff, information protection and security operations manager at CIGNA.

Thousands of organizations have successfully implemented IBM Tivoli Identity Manager to leverage its automated provisioning capabilities for enterprise application administration and access control. However, the process of determining whether corporate-wide security policies and compliance objectives are being met requires significant manual labor, is prone to errors and exposes companies to risk. Aveksa addresses these challenges for enterprises through integration with Tivoli Identity Manager in the following key areas:

• Identity, Entitlement and Role Collection – gathers information based on user and account and role attributes within Tivoli Identity Manager and correlates it with other application and access enforcement infrastructure, resulting in a unified view of all entitlements and roles across the enterprise.

• Business Policy Validation - allows business and IT teams to easily define business rules that automate exception-based monitoring or roles collected from IBM Tivoli Identity Manager to detect compliance exceptions such as Segregation of Duties violations.

• Role Management – defines and mines roles based on user and account attribute information collected from Tivoli Identity Manager. Aveksa can also add business context information to these roles and export the definitions back into Tivoli Identity Manager.

• Reporting – offers multiple options for detailing entitlements, accounts, account attributes and roles, both within Tivoli Identity Manager and across other enterprise systems and applications.

“IBM Tivoli Identity Manager is one of the most widely deployed user provisioning systems in the market, and its users face a universal challenge as they spend excessive hours manually tracking and tracing entitlement requests, conducting access certifications and monitoring compliance,” said Deepak Taneja, founder, president and CTO of Aveksa. “Through the integration with IBM Tivoli Identity Manager, Aveksa will dramatically simplify and streamline these tasks for customers. Aveksa adds value to an organization’s investment in Tivoli Identity Manager by reducing resource overhead and access related risks while ensuring that compliance is sustainable.”

About the Aveksa Access Governance Platform
The Aveksa Access Governance Platform is the industry’s first comprehensive solution for access governance, risk and compliance management. It is comprised of the Aveksa Compliance Manager, which automates the monitoring, reporting, certification and remediation of user entitlements, and the Aveksa Role Manager, which enables role discovery, modeling and maintenance. With the Aveksa Access Governance Platform, organizations can more efficiently address security and regulatory demands through a collaborative process that automates manual tasks, enforces accountability, provides evidence of compliance and reduces business risk related to user access. Aveksa’s integrated solution can also be found in the IBM Tivoli Open Process Automation Library, at www.ibm.com/software/tivoli/opal.

About Aveksa
Aveksa provides the most comprehensive, enterprise-class, access governance, risk management and compliance solution. Aveksa automates the monitoring, reporting, certification and remediation of user entitlements and roles; enables role discovery and lifecycle management; and delivers unmatched visibility into the true state of user access rights. With Aveksa, business, security and compliance teams can effectively collaborate and enforce accountability. Our growing customer base includes leading global Fortune 2000 organizations in financial services, healthcare, retail, transportation and manufacturing. For more information, go to www.aveksa.com.