McAfee strengthens its position in security risk management

Mumbai

April 10, 2008

McAfee recently announced the formation of a new business unit focused on IT
governance, risk and compliance. The new unit will focus on driving innovation
and extending McAfee's lead in security risk management. Led by George Kurtz,
Senior VP and GM, McAfee, the business unit will accelerate McAfee's leadership
position in the rapidly growing governance, risk and compliance market.

Government regulations and corporate policies demand that businesses prove
their ability to comply with IT security policies designed to minimize risk. The
risk and compliance business unit will provide McAfee with a greater focus on
aggressively enhancing, integrating and adding content to its current risk and
compliance offerings. The company will also concentrate on efforts to include
tighter cross-product integration with other McAfee products.

“Organizations face an ever-increasing array of policies and regulations.
As a result, governance, risk and compliance have become a rapidly growing and
continuously evolving part of our industry. Formation of the McAfee risk and
compliance business unit positions us well to leverage our compliance expertise
and build on our strengths to simplify the enterprise challenges in this
important area,” said Dave DeWalt, CEO and President, McAfee.

McAfee's new business unit combines market expertise, strong leadership and
proven execution that enables highly regulated and distributed organizations to
automate critical business processes and achieve a faster time for compliance
through the industry's most comprehensive and integrated solutions. The new
business unit will be headed by Kurtz. Previously, Kurtz was CEO, Foundstone,
which was acquired by McAfee in October of 2004.

McAfee has also expanded its risk and compliance product portfolio with the
new version of McAfee Vulnerability Manager-McAfee Vulnerability Manager 6.5
(formerly known as Foundstone Enterprise). McAfee Vulnerability Manager helps
security administrators to quickly and accurately find and prioritize
vulnerabilities and policy violations on networked systems. It enables
enterprises to improve operational efficiency and security protection, while
also meeting the requirements of regulations and standards.