Metastorm Earns Common Criteria Certification

Company Leads Industry as First and Only Pure-Play BPM Provider to Achieve Highest Government Security Requirements

BALTIMORE, MD – November 14, 2006 – Metastorm, a leading provider of Business Process Management (BPM) software for modeling, automating, integrating, and improving both human and system-based processes, today announced that Metastorm BPM™ (also known as e-Work) has received Evaluation Assurance Level 2 (EAL2) Common Criteria Certification. Metastorm is the first and only pure-play BPM provider to achieve Common Criteria Certification, validating that the Metastorm BPM software meets the highest level of security requirements defined by the United States National Security Agency (NSA) in conjunction with other international governments.

A Department of Defense source stated, “Common Criteria Certification is a critical factor during our evaluation of new software applications. The common criteria certification on Metastorm BPM/e-Work allows us to avoid extensive waiver procedures and should help us accelerate our process development efforts, lower maintenance costs, and consolidate access controls.”

The Common Criteria Certification, sanctioned by the National Information Assurance Partnership Common Criteria Evaluation and Validation Scheme (CCEVS) is a global initiative and the result of a multi-year effort by the governments of the U.S., Canada, United Kingdom, France, Germany, and the Netherlands to develop harmonized security criteria for IT products.

The program has been implemented to ensure that technologies have undergone the necessary due diligence to comply with current international security standards. Government agencies around the world are vulnerable to security risks and must adhere to strict standards when selecting technology providers. Common Criteria Certification is an international set of guidelines that gives organizations confidence that they are making secure technology purchasing decisions. In addition, Metastorm’s ability to achieve a product security certification to U.S. national security standards helps alleviate any concerns on security expressed by other risk-adverse target industries including financial services, healthcare, and legal.

“Metastorm understands that government agencies on a global basis are placing a heightened emphasis on security,” stated Greg Carter, CTO, Metastorm. “Given that BPM technology touches many core processes, it is essential that it be secure at all levels. Common Criteria certification is one of the toughest certifications to achieve. Metastorm’s strategic decision to put our BPM product through the rigorous evaluation and certification process demonstrates our commitment to delivering a secure solution and provides much needed assurance to our customers. Common Criteria certification is fast becoming a must-have in order to do business with the US federal government, especially in the defense and intelligence agencies. Being the first vendor in the market to achieve certification for a pure-BPM product displays Metastorm’s dedication and proven success as a leader in this market.”

About Metastorm
As the first breakaway BPM vendor, Metastorm is a leader in business process management (BPM) software and best practice methodologies for modeling, automating, integrating, and improving both human and system-based processes. Metastorm BPM™ is a complete solution for roundtrip process improvement, designed specifically to address complex processes that are unique to organizations. Metastorm’s 1200+ global client base in manufacturing, retail, financial services, business services, healthcare and government are achieving rapid ROI and Enterprise Process Advantage® in customer service, supply chain operations, risk management, and internal operations. For more information visit www.metastorm.com.

Copyright 2006, Metastorm, Inc. All rights reserved. Metastorm BPM and Enterprise Process Advantage are either trademarks or registered trademarks of Metastorm, Inc. Other product, service and company names mentioned herein are for identification purposes only and may be trademarks of their respective owners.

THIS NEWS RELEASE CONTAINS ARCHIVAL INFORMATION, WHICH SHOULD NOT BE CONSIDERED CURRENT AND MAY NO LONGER BE ACCURATE.

Press Contact Information:
Gina Karr
Metastorm
T: +1 443-874-1260
T: +44 (0) 208 971 1519
gkarr@metastorm.com

Shahed Ahmed
Merritt Group
T: +1 703-390-1515
ahmed@merrittgrp.com