Workscape Receives High Marks in ISO Security Assessment

MARLBOROUGH, MA--(Marketwire - April 16, 2009) - Workscape, Inc., a leading provider of outsourced benefits and talent management solutions, today announced that the company has achieved a very high degree of compliance with the ISO 27002 standard, according to SystemExperts Corporation, the premier provider of IT compliance and network security consulting services.

SystemExperts recently performed an ISO 27002 Baseline Assessment of Workscape, focusing primarily on its production infrastructure. The ISO 27002 standard establishes guidelines and general principles for initiating, implementing, maintaining and improving information security management within an organization. Workscape's compliance with ISO 27002 demonstrates the company's unflagging commitment to maintaining thorough system security standards.

"After an extensive review, SystemExperts attests that Workscape has achieved a very high degree of compliance with the ISO 27002 standard. The review also revealed no operational weaknesses," stated Jonathan G. Gossels, president and CEO of SystemExperts. "We applaud Workscape's documentation of its practices, policies and procedures. It has done a remarkably thorough job."

The SystemExperts ISO 27002 Compliance Program is a structured methodology designed to help companies build comprehensive and cost-effective enterprise security programs, ensuring that security resources are applied wisely and that efforts are focused on activities that will reduce real business risk.

Bill Bergen, Workscape's CIO and Chief of Operations, added, "We pride ourselves on responding to the challenging needs of large global organizations by helping them address two of the largest controllable workforce costs for an enterprise: healthcare benefits and compensation . Given the nature of our mission, our clients have to feel confident that their business-critical data is safeguarded every step of the way with robust security measures. By undergoing regular evaluations with security consultants like SystemExperts, we ensure that our clients' information is protected under the most stringent controls available today."

As part of SystemExperts' critical security services for Workscape, Workscape will undergo ongoing system security reviews, including a semi-annual Internet Exposure Profile; monthly EXPERTscans of internal and externally-facing systems to check for vulnerabilities; and SYSIntell (SystemExperts' vendor patch and exploit intelligence service).

This distinction stands as the latest example of Workscape's ongoing dedication to safeguarding client data. Additional examples include SAS 70 Level II certification, as well as achieving Cybertrust certification for seven consecutive years.

About Workscape

Workscape is a leading provider of business-critical HR solutions that enable hundreds of organizations to manage their two largest workforce expenditures: employee benefits and performance-driven compensation. Workscape's offerings share a common technology platform, can be readily integrated with existing IT investments, serve millions of employees and are scalable and configurable to meet the distinct requirements of organizations ranging from 1,000 to over 500,000 employees. One client uses the company's award-winning multi-lingual compensation solution to compensate hundreds of thousands of employees across 70 countries. Workscape's outsourced benefits administration offerings are backed by U.S.-based 24/7 support for managers and employees on policies and processes. For more information about Workscape, visit www.workscape.com or call 888-605-9620.

About SystemExperts

Founded in 1994, SystemExperts™ is the premier provider of IT compliance and network security consulting services. The company's clients include many of the leading Wall Street firms, top-tier online retailers, major manufacturers, as well as small businesses in a wide range of industries.

SystemExperts's consultants are world-renowned authorities who bring to every engagement a unique combination of business experience and technical expertise. Through a range of consulting services based on signature methodologies, SystemExperts develops security architectures, performs network penetration and application vulnerability testing, develops security policies, and assesses compliance with relevant regulations and standards (ISO 17799/27002, PCI, SOX and HIPAA). Further information about SystemExperts can be found at www.systemexperts.com or by calling 1-888-749-9800.