News & Events

VeriSign Introduces Security Risk Profiling Service to Help Enterprises Identify, Visualize and Quantify Security Risks

Comprehensive Service Enables Better Operational and Financial Decisions By Providing a Holistic View of Security Environment

MOUNTAIN VIEW, CA., March 21, 2006 – VeriSign, Inc., (NASDAQ: VRSN), the leading provider of intelligent infrastructure services for the Internet and telecommunications networks, today announced the VeriSign® Security Risk Profiling Service, the industry’s first comprehensive solution to help enterprises identify, visualize and quantify information security risks.

The VeriSign Security Risk Profiling Service enables enterprises to make better operational and financial decisions by providing a holistic view of threats, vulnerabilities, network access policies and business impacts and then generating a dynamic risk score based on those factors at a device, business unit, and enterprise level. The service extends VeriSign’s portfolio of enterprise risk-management solutions which include VeriSign® Managed Security Services, VeriSign® Global Security Consulting, and VeriSign® iDefense Security Intelligence Services. The service includes sophisticated simulation and modeling technology to help customers understand the impact of emerging threats and potential network security policy changes, and to measure compliance with both internal and external policies and regulations.

Malicious attacks are increasing in both sophistication and frequency, forcing enterprises to perform numerous steps to ensure a strong network security posture. The VeriSign Security Risk Profiling Service enables a comprehensive risk management approach that evaluates business assets, identifies likely attack sources and paths, and provides a business view of threats and vulnerabilities, all while addressing compliance requirements affecting the industry today.

"The discussion of enterprise security has matured from the technology speeds and feeds to a business-level dialogue around risk mitigation and management strategies.  In order to make prudent business decisions, all the required information must be synthesized in a manner which is understandable and actionable," said Allan Carey, program manager of Security Services at IDC.  "Organizations currently pull available information manually from disparate systems.  A service such as VeriSign's can assist in automating the collection and presentation of vital intelligence, validate IT assets and resources, and support proactive risk and compliance decisions with a grounded methodology."

The VeriSign Security Risk Profiling Service leverages industry-leading technology from Skybox® Security to take data from a broad range of firewalls, routers and vulnerability management systems and combine that information with the unique intelligence gathered by the VeriSign iDefense Security Intelligence Services team and the VeriSign Global Security Consulting team to deliver a service that includes:

• Automated IT Security Modeling:  Provides a complete network map that includes location of assets and all associated access paths
• Simulation and Visualization Models: Enabling understanding of IT change impacts and better preparation for potential threats
• Business Impact Analysis and Risk Metrics: Providing enterprises with a better understanding of the financial and operational risks of security threats
• Early Warning Analysis: Immediate identification and understanding of risks, as they emerge
• Regulatory Compliance Risk Management: Detailed analysis that shows whether an enterprise is in compliance with internal and external regulations and guidance

“In order to keep pace with security threats and increasingly complex compliance requirements, enterprises require solutions that help them more effectively manage risk,” said Chris Babel, vice president, Managed Security Services, VeriSign. “The VeriSign Security Risk Profiling Service is the industry’s first truly comprehensive service-based solution that provides enterprises with a real-time assessment of their business risks.”

“As an existing MSS customer, we rely on VeriSign to provide consistent and reliable management of our network security devices,” said Mark Van Holsbeck, director, Enterprise Security and Planning, Avery Dennison.  “We have chosen to augment our services with the VeriSign Security Risk Profiling Service because it allows us to make better business decisions through understanding the impact of evolving threats and the changes required to protect against them.”

More information on the VeriSign Security Risk Profiling Service is available at: www.verisign.com/mss/riskprofiling 

About VeriSign  
VeriSign, Inc. (Nasdaq: VRSN), operates intelligent infrastructure services that enable and protect billions of interactions every day across the world’s voice and data networks. Additional news and information about the company is available at www.verisign.com

For more information, contact:  
VeriSign Media Relations: Brendan P. Lewis, brlewis@verisign.com, 650-426-4470  
VeriSign Investor Relations: Tom McCallum, tmccallum@verisign.com, 650-426-3744

Statements in this announcement other than historical data and information constitute forward-looking statements within the meaning of Section 27A of the Securities Act of 1933 and Section 21E of the Securities Exchange Act of 1934. These statements involve risks and uncertainties that could cause VeriSign's actual results to differ materially from those stated or implied by such forward-looking statements. The potential risks and uncertainties include, among others, the uncertainty of future revenue and profitability and potential fluctuations in quarterly operating results due to such factors as the inability of VeriSign to successfully develop and market new products and services and customer acceptance of any new products or services, including the VeriSign Security Risk Profiling Service; the possibility that VeriSign’s announced new services may not result in additional customers, profits or revenues; and increased competition and pricing pressures. More information about potential factors that could affect the company's business and financial results is included in VeriSign's filings with the Securities and Exchange Commission, including in the company's Annual Report on Form 10-K for the year ended December 31, 2005 and quarterly reports on Form 10-Q. VeriSign undertakes no obligation to update any of the forward-looking statements after the date of this press release.

# # #