NetSPI Helps City of St. Paul Protect Critical Infrastructure for RNC

Information Security Consulting Firm Assessed Risks, Advised on Protective Measures in Advance of Republican National Convention

Minneapolis, October 7, 2008 — NetSPI, a company specializing in information security assessments and the development of information security programs, was tapped by the City of St. Paul to evaluate risks to critical infrastructure and advise on the city’s preparedness for the Republican National Convention (RNC).

First, NetSPI advised the city on what should be tested. Then the company performed readiness assessments on such elements of critical infrastructure as the city’s water supply and the Police Department’s computer-aided dispatch system. The company also conducted vulnerability assessments and penetration testing on other networks at public facilities such as libraries and recreation centers, using a variety of electronic and physical techniques, as well as social engineering. As a result, NetSPI was able to advise the city on a number of protective measures. Details on these measures have not been made public for security reasons.

Andrea Casselton, IT Director for the City of St. Paul, said that Preparing for the RNC was a large, multi-faceted undertaking, and NetSPI provided valuable help with its assessments and recommendations.

Deke George, CEO of NetSPI, noted that We are proud to have been selected by St. Paul for these important projects, and to have contributed to the enormous effort that went into preparing for this event.

About NetSPI (www.netspi.com)

NetSPI, a privately held information-security consulting company, was founded in 2001. The company provides advisory, assessment, and audit services designed to analyze and mitigate risks and ensure compliance with relevant laws and industry standards. Clients include large financial firms, retailers, hospitals, colleges and universities, and energy companies. More information is available at http://www.netspi.com/.