News Release - 11 October 2004

Citicus announces major new compliance tool to user group

London-based Citicus held its 2004 user group meeting in Miami, USA on 5-6 October and announced the new generation of its award-winning Citicus ONE risk management software with a focus on regulatory compliance reporting.

The new features of Citicus ONE will allow organizations to conduct one-pass risk and control assessments and at the same time report compliance against a wide range of regulatory compliance regimes, such as Sarbanes-Oxley, Basel II, HIPAA, GLBA, ISO17799 and BS7799.

Citicus Managing Director, Simon Oxley, commented: "Organizations today are subject to a bewildering range of regulatory requirements concerning their IT controls and the cost of achieving and demonstrating compliance is a serious business issue. The new release of Citicus ONE will provide a highly efficient way for organizations to report on compliance with many regulatory requirements while focussing on the real issue that should concern them - driving down the risk of incidents that can seriously disrupt their information systems."

The new functionality being delivered in Citicus ONE Release 2.0 includes:

• Customizable detailed compliance checklists (eg for presenting control statements from BS7799, COBIT, ISF Standard of good practice)
• 'Smart standards' that automatically select appropriate control statements based on the characteristics of an information system
• Compliance status reporting, providing multiple compliance views (eg SOX, 7799, HIPAA)
• Enhanced risk remediation planning tools including issue tracking, action planning and cost/benefit recording.

Citicus announced that Release 2.0 will be delivered in February 2005 and the news was welcomed enthusiastically by user group members. The Director of IT Security of a major European manufacturing company commented: "Within the next year we will have completed risk assessments for over 1000 of our key information resources using Citicus ONE and this is now an established part of our risk management framework. The new functionality in Release 2.0 will allow us to use this work as the foundation of our Sarbanes-Oxley compliance process."

For more information contact:

Back to News