PricewaterhouseCoopers and SailPoint Team to Help Companies Solve Identity Governance, Risk Management and Compliance Challenges

AUSTIN, Texas, Dec. 5, 2007 – Identity risk management software pioneer SailPoint Technologies, Inc. and PricewaterhouseCoopers LLP today announced they will team to deliver comprehensive identity risk management solutions across the enterprise. PricewaterhouseCoopers identity and risk management experience, combined with Sailpoint's Compliance IQ technology will help address the needs of a growing market of organizations seeking to reduce the complexity, costs and risks associated with controlling and managing user access to sensitive applications and data.

In a recent global security report from PricewaterhouseCoopers [1], 78 percent of surveyed organizations state they do not continuously classify data and information assets by risk level; and in a similar study commissioned by SailPoint, 82 percent of surveyed organizations acknowledged a risk-based approach to identity management would be more effective [2].

"Organizations who focus on a risk-based approach to solving the identity management challenge will realize greater value overall," said Jerry Lewis, principal and national identity management leader, PricewaterhouseCoopers. "It's time to trade today's costly ‘boil the ocean' identity management approach that treats all users and resources equally for a fresh, cost-effective yet risk-mitigating approach that focuses efforts on those users and resources that represent the greatest business risk."

The first single software product to create a 360-degree view of users, SailPoint's Compliance IQ correlates user activity to user access privileges and computes user risk scores to make it easy for organizations to identify, measure, and reduce the risk of fraud, theft or misuse of data. The concept of risk scoring is unique to SailPoint and helps organizations – no matter what level of identity governance maturity they have achieved – focus on and allocate controls and monitoring based on business risk.

"We see a clear disconnect between what companies think they should do to effectively control and manage access and what they are doing," said SailPoint CEO Mark McClain. "Firms clearly appreciate the value of controlling access on a risk basis but don't view it as an attainable goal right now. That's why our relationship with PricewaterhouseCoopers is so important – together we are showing companies they can begin managing identity risk today, and we're giving them the tools they need to get there."

About PricewaterhouseCoopers

PricewaterhouseCoopers provides industry-focused assurance, tax and advisory services to build public trust and enhance value for its clients and their stakeholders. More than 146,000 people in 150 countries across our network share their thinking, experience and solutions to develop fresh perspectives and practical advice.

"PricewaterhouseCoopers" refers to the network of member firms of PricewaterhouseCoopers International Limited, each of which is a separate and independent legal entity.

About SailPoint

SailPoint Technologies, Inc. develops software with unique "Identity Intelligence" that helps organizations gain control over user access to critical systems and data, streamline costly IT compliance processes and reduce the risks of poor access control, such as corporate data loss or theft and failed audits. Founded in December 2005, SailPoint is based in Austin, Texas.

¹ The State of Information Security 2007, a worldwide study by CIO, CSO and PricewaterhouseCoopers
² Audit & Compliance Professionals: Survey on Identity Compliance, a Ponemon Institute survey commissioned by SailPoint