Aveksa Compliance Manager Bridges Gap between Identity and Access Management, and Compliance

WALTHAM, Mass.—April 23, 2007—Aveksa, a leading provider of automated security compliance solutions, today announced support for CA SiteMinder and CA Identity Manager from Computer Associates. With Aveksa Compliance Manager, organizations can implement an enterprise-wide security strategy to automate the monitoring, reporting and certification of user entitlements and roles, including those controlled by CA SiteMinder and CA Identity Manager.

Aveksa Compliance Manager supports the native collection and monitoring of identity and user entitlement information from CA SiteMinder and CA Identity Manager, providing customers with complete visibility into the access-related information configured within these systems. Entitlements to intranet and extranet applications are collected from the CA SiteMinder Policy Server, providing the capability to filter at domain, realm and user-directory levels. User account and role information is collected from CA Identity Manager.

According to Certified Security Solutions (CSS), a national information security consulting firm that has worked as a trusted advisor to many CA SiteMinder customers, while organizations have successfully implemented CA SiteMinder for Web access management, determining if security policies and compliance objectives are being met is still very much a manual process and prone to error, exposing companies to risk. Aveksa Compliance Manager automates the collection of entitlement and role information from applications, file systems and identity and access management systems, including CA SiteMinder and CA Identity Manager, allowing IT security and compliance teams to determine who has access to what, if they should have access, and whether compliance objectives are being met – across the enterprise.

“Organizations investing in identity and access management will now be able to automatically collect information from CA SiteMinder and other applications,” said Michael L. Evans, president and CEO of Certified Security Solutions, Inc. “By supporting popular systems such as CA SiteMinder, as well as a wide-range of other data sources, Aveksa has created an attractive offering for our enterprise customers that will allow them to implement effective entitlement and role certifications, and automate their compliance monitoring and reporting.”

Aveksa delivers the only automated security compliance management solution that enables security professionals to efficiently and accurately analyze CA SiteMinder policies and CA Identity Manager identities and roles.

“Companies have devoted significant resources toward the purchase and implementation of identity management applications to manage their user access initiatives through roles and policies,” said Deepak Taneja, CEO of Aveksa. “By extending its collection and analysis capabilities to include CA SiteMinder and CA Identity Manager, Aveksa will provide these organizations with true enterprisewide visibility into user entitlements. In addition, they will receive a fully-automated workflow for identity-driven business processes for efficient compliance and risk management.”

About Certified Security Solutions, Inc.
CSS is a national information security consulting firm with regional operations in Cleveland, OH; Seattle, WA; and Orlando, FL. CSS helps clients leverage existing and emerging technologies in practical ways to reduce risk and protect information assets. CSS specializes in three critical areas of information security: Enterprise security strategy, identity and access management, and application and platform security. For more information, visit www.css-security.com.

About Aveksa
Aveksa delivers the only enterprise-class security risk and compliance management solution that automates access rights monitoring, compliance reporting and remediation. Aveksa enables IT security and compliance teams to balance the pressures of managing company security and meeting corporate compliance objectives while drastically reducing the costs associated with attaining sustainable compliance.

Aveksa was founded by identity management and security compliance experts who understand how to help organizations effectively deal with regulations such as Sarbanes-Oxley, HIPAA, GLBA and Basel II. Aveksa headquarters are located in Waltham, Mass. For more information, visit www.aveksa.com.