TraceSecurity, a leading provider of on-demand security compliance solutions, today announced the unveiling of their newest software as a service (SaaS), TraceSecurity Risk Manager. The first SaaS product to integrate the latest in risk management methodology with continually evolving compliance standards, TraceSecurity's Risk Manager allows users to quickly and accurately determine the proper controls necessary for implementation to secure confidential data against both physical and information security threats.

"Many regulations now require organizations to conduct risk assessments," stated Peter Stewart, TraceSecurity's CEO and President. "TraceSecurity's Risk Manager enables users to demonstrate that they have a verifiable, repeatable method for measuring risk and for complying with regulations. By offering Risk Manager as a SaaS solution, we are able to automate the required risk assessment process into a single robust solution with the benefits of on- demand delivery, enabling fast implementation times, minimal IT involvement and low cost of ownership."

Risk Manager's features and benefits include:

- Utilization of integrated risk management methodology based on industrystandards
- Automation of the risk assessment process
- Employment of predefined and customizable assessment templates
- Demonstration of verifiable, repeatable methodology for compliance andregulatory measurement
- Ability to build online risk assessment questionnaires
- Creation of risk scorecards and profiles
- Creation of board level reports with customizable management reportingtools

Since TraceSecurity's Risk Manager is delivered as a software service, ithas significant benefits over traditional software including:

- Quick deployment - no software to install
- Low upfront costs - no need to purchase additional hardware orsoftware
- Low maintenance costs - no technology to maintain; TraceSecurityexperts manage the software
- Secure infrastructure - reliable, secure web-based service delivery

The FTC estimates the total cost for identity theft in the U.S. to be $50 billion, and new requirements from government agencies require businesses and organizations to perform security risk assessments against a number of standards including GLBA, SOX, HIPA, ISO-17799 and 27001, FFIEC, BSA and COBIT. To combat this growing epidemic and meet regulatory compliance mandates, TraceSecurity's Risk Manager combines qualitative analysis with quantitative measurement, which allows users to prioritize risk and identify vulnerabilities, as well as to determine the risk's magnitude of impact which can help identify the cost-benefits associated with recommended controls.

About TraceSecurity

TraceSecurity is a leading provider of security compliance and risk management solutions. The company helps organizations of all sizes to achieve, maintain and demonstrate security compliance while significantly improving their security posture. Key to TraceSecurity's success is the company's comprehensive patent-pending methodology that helps clients address all of the critical components of a successful security compliance program; people, process and technology.

TraceSecurity delivers its solutions through an integrated software-as-a- service platform backed by expert professional services and comprehensive security awareness programs. The company's flagship offering, TraceCompliance Manager, is the first comprehensive solution to automate regulatory compliance audits, board level reporting, policy management, vulnerability assessment, and employee education and testing. The company's expert professional services include onsite security audits, and social engineering. The security awareness programs include an exhaustive set of standard offerings as well as custom designed courses. With over 700 clients, TraceSecurity supports the risk management and security compliance efforts of organizations in financial services, healthcare, insurance, government and other regulated sectors. For more information, please visit http://www.tracesecurity.com.