Certification Date: April 11, 2007

VeriSign, the leading provider of security and infrastructure services headquartered in Mountain View, California, conducted an assessment for Alpha Systems, Inc and is pleased to verify that the E-Direct and Imageworks core applications, their supporting infrastructure, and the governing policies, processes, and procedures have been certified under the VeriSign® Security Certification Program.

The scope of our assessment was the E-Direct and Imageworks core applications infrastructure, facilities, and the policies, procedures, and processes used to operate and manage the enterprise security program. Our assessment included a detailed review of:

• The application architectures
• The application's resistance to the OWASP Top Ten exploits
• The policies and processes used to manage the infrastructure and personnel used to develop, test, and manage this infrastructure
• The underlying code for both core applications

Our assessment was conducted in accordance with VeriSign's Security Certification Methodology, which incorporates openly available requirements from regulations and industry standards. For the assessment, VeriSign focused on the security components of the following standards:

• ISO 17799:2005
• OWASP Top 10

In our opinion, as of the Certification Date above, Alpha systems, Inc. has met the requirements of the VeriSign Security Certification Program with respect to its E-Direct and Imageworks core applications, systems and supporting security policies and procedures. As such, Alpha Systems, Inc. has demonstrated that, as of the Certification Date, it has taken reasonable and appropriate steps to (i) identify and manage information security risks relating to the applications and supporting infrastructure, and (ii) utilize information security best practices in the area(s) assessed.

Respectfully submitted,  

VeriSign Enterprise Consulting Services


Please see https://www.verisign.com/dm/securitycertification/index.html for the requirements of, and other additional information related to, the VeriSign Security Certification Program.