News Release

<< Back
Printer Friendly Version View printer-friendly version
Zix Corporation Receives AICPA SysTrust Certification; ZixSecure Center Achieves Accredited SysTrust Standards Verified Through Independent Evaluation

DALLAS--(BUSINESS WIRE)--May 12, 2003--Zix Corporation (ZixCorp(TM)), (Nasdaq:ZIXI), a global provider of e-messaging management and protection services, today announced it has earned the American Institute of Certified Public Accountants SysTrust(TM) certification for system reliability for effectiveness of controls over the security, availability, processing integrity, and confidentiality of ZixCorp's ZixSecure Center(TM), the world-class data center that handles operations for ZixCorp services. ZixCorp met the principles and criteria established for SysTrust by the American Institute of Certified Public Accountants (AICPA) and the Canadian Institute of Chartered Accountants (CICA) following a Deloitte & Touche LLP evaluation during the period of March 1 to April 30.

Through SysTrust, Deloitte & Touche (D&T) independently examined ZixCorp to provide assurances that its systems are capable of operating without material error, fault, or failure during the designated period in the specified environment. The SysTrust certification is designed to increase the comfort of management, customers, and business partners that support a business or a particular activity. The SysTrust standards used to evaluate the reliability of a system cover the areas of availability, security, processing integrity, and confidentiality. SysTrust certification is sought by organizations that perform mission critical operations and must be trusted and absolutely reliable. It is awarded only to organizations that are attuned to the risks posed by their environment and expressly equipped with the controls that address those risks.

"Deloitte & Touche LLP is extremely pleased to have worked with Zix Corporation in its attaining AICPA/CICA SysTrust accreditation under the Security, Availability, Processing Integrity and Confidentiality principles," said Bruce Barrick, the D&T Enterprise Risk Services partner who supervised the audit. "ZixCorp clearly meets the mark in incorporating the SysTrust standards into its existing management, quality assurance, and operating procedures. We salute ZixCorp in this accomplishment of demonstrating its commitment to achieving the highest level of security and controls to meet its clients' and industry expectations."

Recent legislation, including the Health Insurance Portability and Accountability Act of 1996 (HIPAA) for healthcare and the Gramm-Leach-Bliley Act (GLBA) for financial services, has raised public awareness regarding the issues of security and confidentiality of private information, as well as how this information is handled. More companies are requiring proof that providers of management and hosting services have stable and secure operations in place to support the exchange of their private data. A SysTrust certification helps provide proof of a tested, reliable, and secure IT environment.

John Christiansen, an attorney with Seattle-based Preston, Gates & Ellis LLP and an expert on HIPAA, believes that gaining SysTrust accreditation is an excellent way to demonstrate that the expertise needed to make a good-faith effort to meet the guidelines of HIPAA has been brought to bear. "Whether businesses covered by the HIPAA regulations use in-house or third-party providers to protect their e-messaging communications, it is essential that the technologies, policies, and procedures which create such safeguards really provide the necessary levels of protection. Many organizations may not have the expertise needed to properly secure their e-messaging, and as a result, may not be able to provide adequate safeguards for Protected Health Information, as required by HIPAA. Outsourcing to a firm that specializes in this complex task may be an excellent solution to this problem, and SysTrust certification of the firm is a valuable third-party assurance of its competence and reliability. A Covered Entity should always have evidence that a services provider is trustworthy before relying on it for functions regulated by HIPAA, and for these purposes, a SysTrust certification is the 'gold standard.'"

John A. Ryan, ZixCorp chairman, president, and CEO, believes that the market expectation for handling sensitive data securely is growing. "ZixCorp takes our responsibility of managing confidential information very seriously," he said. "We have pursued SysTrust certification to ensure the high standards of our data handling operations and company procedures and to help demonstrate to our customers that their trust in us is justified. The underlying operations and systems of our services are rigorously tested internally on a continuous basis, and now we have additional external, independent proof of the security and reliability of our systems. We see this SysTrust certification as one of the ways we repeatedly demonstrate our leadership in the marketplace and our sense of responsibility to our customers."

About the AICPA

The American Institute of Certified Public Accountants (AICPA) is the ISO 9001 certified national professional organization of CPAs in the United States with more than 340,000 members in public practice, business and industry, government, and education. For more information about SysTrust, please visit

About Zix Corporation

Zix Corporation (ZixCorp(TM)) is a global provider of e-messaging management and protection services. ZixCorp offers a portfolio of managed on-site and hosted e-messaging solutions to protect organizations from viruses, spam, and electronic attack, while delivering the ability to enforce corporate policies and securely send to anyone. ZixCorp's advisory services and secure e-messaging solutions enable organizations of any size to streamline operations, avoid obsolescence, mitigate risks, and leverage the cost and time efficiencies of e-messaging. For more information, visit

    CONTACT: ZixCorp
             Media Contact:
             Whitney Gilliam, 214/515-7338
             Investor Contact:
             Beverly V. Fuortes, 214/515-7357

    SOURCE: Zix Corporation