Press Release

Ingrian Solutions Play Key Role in Addressing New 2005 Privacy Legislation and Security Mandates

DataSecure Platforms Work in Wide Range of Enterprise Environments to Ensure Data Privacy

REDWOOD CITY, Calif.—January 10, 2005— Today, many enterprises are working to understand the business and technology ramifications of recently enacted privacy legislation, which follows a host of other legislative and security mandates. Having taken a proactive approach to securing sensitive data, customers of Ingrian™ Networks, Inc., the leading provider of data privacy solutions, are well-equipped to mitigate an array of threats of data theft and to address these more stringent privacy requirements.

The most recent piece of legislation affecting many U.S. enterprises is California’s General Security Standard for Businesses, Assembly Bill 1950, which took effect on January 1, 2005. This rule requires organizations that manage personal information to implement security procedures to safeguard that data. This law defines data that must be protected to include the combination of name and such information as credit card or debit card numbers, social security numbers, account numbers, driver’s license numbers, and other records. AB 1950 states that a business managing that information must “implement and maintain reasonable security procedures and practices” in order to protect that data.

“California’s Assembly Bill 1950 expands on the privacy requirements of Senate Bill 1386 to require that information holders protect data, not just report its disclosure,” explained Rich Mogull, research director, information security and risk, Gartner.

Because it affects any company that stores or manages the information of California residents, the law has implications for virtually all large enterprises, which are also contending with such statutes as the Gramm-Leach-Bliley Act, the Sarbanes-Oxley Act, and the European Union Data Protection Directive.

“None of these regulations enumerates specific security precautions, but all require the protection of enterprise data, which cannot be managed with perimeter security alone,” Mogul said. “The principal goal of most attacks, whether from external sources or internal malicious behaviour, is to compromise data. Now is the time for enterprises to protect information assets as thoroughly as they protect their walls and doors.”

In light of these demands, many organizations are looking to leverage data encryption as part of a data privacy initiative. In the past, organizations have been slow to implement data encryption because of challenges it had traditionally posed: complex application integration, time-consuming maintenance, and poor performance to name a few. Ingrian offers a solution that enables organizations to gain the security benefits of encryption while avoiding these traditional drawbacks.

Ingrian DataSecure Platforms deliver capabilities for granular encryption, seamless integration, and centralized security management—enabling organizations to effectively address a range of critical security gaps, with unparalleled ease and cost effectiveness. With its solutions, Ingrian supports:

• Organizations around the world seeking to comply with privacy legislation, such as California’s AB 1950, Europe’s Data Protection Directive, and many others.
• Retailers and payment processors in adhering to card issuer security policies like Visa’s Cardholder Information Security Program and MasterCard’s Site Data Protection Program—programs that specifically mandate the encryption of data in databases.
• Financial institutions seeking to comply with the Gramm-Leach-Bliley Act.
• Government agencies seeking to adhere to the Federal Information Security Management Act.

About DataSecure Platforms

Ingrian’s DataSecure platforms provide an intelligent, cost-effective way to protect critical data from both internal and external threats. As a result, organizations can better ensure that they are compliant with legislative and policy mandates for security, and eliminate the risks of data thefts. Ingrian’s breakthrough solution features dedicated hardware appliances and patent-pending cryptography software.

DataSecure offers flexible implementation options so organizations can deploy in a way that makes sense for their business and security needs—whether at the Web, application, or database level. DataSecure platforms can be efficiently integrated in Windows, Java, Linux, and Unix environments, and they work seamlessly with leading databases—including IBM DB2, Oracle, and SQL Server. DataSecure encrypts data in databases and applications at the column or field level, and can be used to secure such data as credit card numbers, social security numbers, passwords, account balances, and email addresses.

About Ingrian Networks

Ingrian Networks brings complete data privacy to the enterprise. With Ingrian DataSecure Platforms, organizations can protect critical data from both internal and external threats, and ensure compliance with legislative and policy mandates for security. DataSecure features a dedicated security appliance and specialized software that enables organizations to encrypt critical data in applications and databases. With its capabilities for granular encryption, seamless integration, and centralized security management, DataSecure enables organizations to guard against a range of security threats, with unparalleled ease and cost effectiveness. Ingrian is a privately held company backed by such investors as Globespan Capital Partners (formerly JAFCO Ventures), Prism Venture Partners, HighBAR Ventures, and Partech International. For more information, visit www.ingrian.com.

Ingrian Media Contact

Betty Liang

Ingrian Networks

bliang@ingrian.com

650.261.2488