CyberSource and One-Sec Partner for PCI Compliance

READING, UK, 1 September 2005

CyberSource Ltd., a leading provider of electronic payment and risk management solutions, has teamed with One-Sec Ltd., an independent information security consultancy and Visa-approved qualified security assessor (QSA), to help merchants gain compliance with the Payment Card Industry Data Security Standard (PCI DSS).

Combining CyberSource's knowledge of electronic payments with One-Sec's data security expertise provides merchants with an effective solution that is payment savvy. The goals are true payment security and operating efficiency, plus full compliance with minimal impact on the efficiency of trading operations.

CyberSource and One-Sec bring merchants of all sizes to PCI DSS compliance. Assistance can range from simple tools to help smaller merchants with network scanning and completion of PCI DSS self assessment questionnaires, to complete pre-compliance readiness and remediation projects followed by on-site audits.

"Our professional services teams know how payment operations work, how payment systems are compromised, and the full array of acceptable approaches to achieve compliance across the multiple requirements," commented Nathan Jackson, managing director at CyberSource Ltd. "This means that we can implement the right solution, faster.

" Benjamin Hosack, sales director UK at One-Sec Ltd. noted, "Adding One-Sec's deep understanding of data and network security to CyberSource's expertise in e-commerce enables us to deliver a truly holistic solution for merchants, whatever their size or requirements."

About the Payment Card Industry Data Security Standard
The PCI Data Security Standard is a worldwide compliance programme that applies to organisations that collect, process, or store credit card data. Backed by major payment card associations including Visa and MasterCard, and recognised by Amex, Diners, JCB and Discover, the PCI standard outlines best practices for securing payment card data.

About One-Sec
One-Sec Ltd. is a leading Visa Qualified Security Assessor and MasterCard scanning vendor in the EU. While our core focus is on the PCI Data Security Standard, we are also an independent information security consulting practice providing consultative led services to all industry verticals across the EU. Collectively, One-Sec enjoys a vast array of industry related experience. One-Sec maintains strategic alliances with industry-leading vendors in order to provide tiered security architectures and holistic solutions to our customers. One-Sec is one of a handful of companies within the EU certified to validate compliance to all portions of the PCI DSS compliance programme. One-Sec is headquartered in Kingston-Upon-Thames, UK and has locations across Europe. For more information, please visit One- Sec's website at www.one-sec.com or email sales@one-sec.com.

About CyberSource
CyberSource Ltd. is a wholly-owned subsidiary of CyberSource Corporation. CyberSource is a leading provider of electronic payment and risk management solutions. CyberSource solutions enable electronic payment processing for Web, call centre, and POS environments. CyberSource also offers industry leading risk management solutions for merchants accepting card-not-present transactions. CyberSource Professional Services designs, integrates, and optimises commerce transaction processing systems. Approximately 10,000 businesses use CyberSource solutions, including half the companies comprising the Dow Jones Industrial Average. The company is headquartered in Mountain View, California, and has sales and service offices in Japan, the United Kingdom, and other locations in the United States. For more information, please visit CyberSource's web site at www.cybersource.com or email uk@cybersource.com.

© 2005 CyberSource Corporation. All rights reserved. CyberSource is a registered trademark in the U.S., UK, and other countries. All other brands and product names are trademarks or registered trademarks of their respective companies.