CUPERTINO, Calif. - November 13, 2007 - ArcSight, Inc., a leader in enterprise security and compliance management solutions and a member of the Oracle PartnerNetwork, will demonstrate at Oracle OpenWorld how the ArcSight Enterprise Security Management (ESM) and Logger products collect and correlate events from Oracle® Database, Oracle Identity Management and Oracle Applications to deliver intelligent business protection and compliance. The ArcSight demonstration will take place at The Security, Risk and Compliance (SRC) Pavilion at Oracle OpenWorld 2007, Moscone West, San Francisco, Booth 3830, November 11-15, 2007.

ArcSight has integrated its solutions to Oracle software to help solve security, compliance and insider threat/fraud problems for enterprises and government customers. ArcSight comprehensively collects, analyzes, stores and responds to database, application, administrative and user events from Oracle software. As a result, enterprises and government agencies now have critical real-time information and analysis about data, user and transaction behavior that pose risks to corporate security, compliance and policy.

"ArcSight's technology is a natural extension of what Oracle offers in security and enterprise protection," said Larry Lunetta, vice president of strategy at ArcSight. "Because we provide real-time collection and analytics across the IP stack from the network to the application, we are able immediately to use the information supplied by Oracle to identify security events at the business process level."

Customers receive a number of significant benefits from the Oracle-ArcSight relationship:

• Faster identification of security and compliance issues, resulting in more rapid response and remediation

• Real-time tracking of high-risk insiders to help ensure they operate within policy

• A centralized view and record of security and compliance-relevant event activity that can be used to validate compliance and security initiatives

• Visibility into violations of corporate policies for customer, employee and business-sensitive data

• Improved productivity via automation of required reports, summaries and auditor requests for information

Oracle Database, Oracle Identity Management and Oracle Applications supply critical business-specific data, user and transaction event information to ArcSight's ESM Security Information/Event Management (SI/EM) and Logger solutions, which use this information to deliver a centralized, real-time view of security, compliance and risk across heterogeneous business and technology infrastructures. ArcSight's platform also correlates the information collected from Oracle software with events from other parts of the IT infrastructure to determine if activity conforms to normal patterns of behavior, established security policies, and compliance regulations. The combined solutions leverage existing IT infrastructure to enable more efficient and effective governance, risk and compliance solutions that require less time and effort to provide security and audit reports and basic IT functions such as security.

About the Oracle PartnerNetwork
Oracle PartnerNetwork is a global business network of more than 19,500 companies that deliver innovative software solutions based on Oracle software. Through access to Oracle's premier products, education, technical services, marketing and sales support, the Oracle PartnerNetwork program provides partners with the resources they need to be successful in today's global economy. Oracle partners are able to offer their customers leading-edge solutions backed by Oracle's position as the world's largest enterprise software company. Partners who are able to demonstrate superior product knowledge, technical expertise and a commitment to doing business with Oracle qualify for the Certified Partner levels. http://oraclepartnernetwork.oracle.com/.

About ArcSight
ArcSight is a leading provider of security and compliance solutions that intelligently identify and mitigate business risk and deliver a centralized view of enterprise-wide events across heterogeneous infrastructures. This real time and historic view into external attacks, insider threats and regulatory compliance provides enterprises, MSSPs and government agencies with the intelligence and response capabilities required to effectively protect and manage their networks and their businesses. For more information, see www.arcsight.com.

ArcSight, The ArcSight logo and ArcSight Logger are trademarks of ArcSight, Inc.

Oracle is a registered trademark of Oracle Corporation and/or its affiliate.