First Data Selects SecurityMetrics for PCI Initiative

Agreement Gives First Data Merchants a Cost Effective Way to Access
Industry-Leading PCI Services

SALT LAKE CITY (SEPTEMBER 16, 2008) – SecurityMetrics today announced that electronic
commerce and payments leader First Data has selected SecurityMetrics to provide PCI services
for their small to mid-sized merchants. By providing the latest security technology coupled with
customer support services for PCI issues, SecurityMetrics helps merchants protect their
organizations from security breaches and simplifies the enrollment process.  SecurityMetrics’ PCI
services result in a reduction of acquirer and merchant liability by limiting risk, reducing fraud, and
increasing consumer credit card confidence in payments.

“We offer First Data’s customers a manner to simplify PCI compliance in one of the most
convenient, secure and cost-effective ways possible,” said Brad Caldwell, SecurityMetrics’ CEO.
“Our approach is to arm the merchant with the knowledge, technology and customer support they
need to assure their customer data is protected – plus the ability to prove it.”

Under the agreement, the companies are working together to provide a complete PCI compliance
program to help small to mid-size merchants gain access to some of the best PCI know-how
available. SecurityMetrics provides a one stop shop for all merchants with unlimited 24 x 7 live
technical support, unlimited manual scanning, weekly resolution reminders, and consulting
services before system upgrades or changes are implemented.

“PCI Compliance may be required in order to take credit cards for purchases, but it is also a good
business practice to protect customer information. This program offers small to mid-size
merchants a new way to streamline PCI compliance so that they can focus more time on serving
customers and expanding their businesses,” said Carl Mazzola, senior vice president, First Data.

To learn more about SecurityMetrics’ PCI Compliance Solutions, contact a representative at
801.705.5665 in North America or 0207.993.8030 in Europe. For more information, see
http://www.securitymetrics.com.

About SecurityMetrics
SecurityMetrics, Inc. is a leading provider of Payment Card Industry (PCI) Data Security Standard
(DSS) security solutions. SecurityMetrics is certified to perform PCI Scans (ASV), PCI audits
(QSA), Payment Application Best Practices audits (QPASP), MasterCard Point of Sale Terminal
Security Program audits, penetration tests and forensic analysis. SecurityMetrics also offers a
security appliance that includes vulnerability assessment, intrusion detection and intrusion
prevention capabilities. SecurityMetrics is a privately held corporation headquartered in Orem,
Utah. For more information contact SecurityMetrics at (801) 724-9600 or visit
www.securitymetrics.com.

About First Data
First Data is a global technology leader in information commerce. The company processes
transaction data of all kinds, harnesses the power of that data and delivers innovations in secure
infrastructure, intelligence and insight for its customers. With operations in 37 countries, First
Data serves more than 5.4 million merchant locations and more than 2,000 card issuers and their
customers. It powers the global economy by making it easy, fast and secure for people and
businesses around the world to buy goods and services using virtually any form of payment. The
company’s portfolio of services and solutions includes merchant transaction processing services;
credit, debit, private-label, gift, payroll and other prepaid card offerings; fraud protection and
authentication solutions; electronic check acceptance services through TeleCheck; as well as
Internet commerce and mobile payment solutions. The company’s STAR Network offers PIN-
secured debit acceptance at 2.1 million ATM and retail locations.  Through First Data’s centers of
excellence, such as security, analytics, customer loyalty and mobile payments, it offers data-
driven commerce solutions for customers around the globe. For more information, visit
www.firstdata.com.