Independent Research Study Finds EnCase® Cybersecurity Can Deliver 388 Percent Return on Investment and Pays for Itself in Just

  Independent Research Study Finds EnCase® Cybersecurity Can Deliver 388
  Percent Return on Investment and Pays for Itself in Just Over Four Months

 Total Economic Impact™ Study Finds the Solution Can Reduce Time to Validate
              and Triage Cyber Threats from Nine Days to One Day

Business Wire

PASADENA, Calif. -- June 19, 2013

Guidance Software, Inc. (NASDAQ: GUID), the World Leader in Digital
Investigations™, today released third-party research of a significant
financial return on investment from its incident response and sensitive data
discovery solution, EnCase® Cybersecurity. According to the Forrester
Consulting “Total Economic Impact™ of EnCase Cybersecurity for Incident
Response” study commissioned by Guidance Software and dated May 2013, a global
automobile manufacturer (GAM) realized a risk-adjusted return on investment of
388 percent, a benefit of more than $2.4 million over three years, and a
payback period of just over four months.

EnCase Cybersecurity empowers customers to rapidly respond to security
breaches and to effectively discover sensitive data residing anywhere on their
networks. Unlike other security solutions that monitor data in motion or use a
signature-based approach to detect known threats, EnCase Cybersecurity
delivers comprehensive visibility across all endpoints and servers on the
network and enables the rapid triage and remediation of security breaches, as
well as locates and wipes errant sensitive data in unauthorized locations for
security and compliance purposes.

According to an executive interview in the study, by using EnCase
Cybersecurity, the North American security team of the global automotive
manufacturer is on average seven times more efficient at identifying and
neutralizing incidents than other regions not having the benefit of EnCase

Based on interviews with the customer, Forrester identified several
quantifiable benefits from the customer’s use of EnCase Cybersecurity,

Reduced time to validate and triage threats: The customer achieved an 89
percent reduction in time to identify threats and develop remediation plays,
from 9.1 days to one day per breach. The security team is able to avoid manual
searches because EnCase Cybersecurity runs kernel-level scans on endpoints.

Reduced time to remediate breaches: The customer experienced a 90 percent
reduction in the time it took them to implement the average breach remediation
plan, from 8.8 days to 0.9 days per incident. The customer told Forrester that
once the security team isolates threat artifacts, EnCase Cybersecurity halts
malicious processes in real time and wipes related artifacts off of the disk.

Reduced impact on server downtime: The customer attained a reduction in server
downtime of over 98 percent, from 100 days to less than two days per incident
for restoring servers to a trusted state. Before using EnCase Cybersecurity,
the practice was to wipe and reimage servers; now, using EnCase Cybersecurity,
the GAM conducts remote and targeted remediation.

“We believe this practical and quantifiable analysis by a respected analyst
firm reveals what Guidance Software customers have known for a long time:
through its ability to capture detailed endpoint activity, EnCase
Cybersecurity empowers organizations to drastically alter the way they respond
to security breaches,” said Alex Andrianopoulos, vice president, Marketing for
Guidance Software. “As a result, our EnCase Cybersecurity customers can
rapidly identify, contain and remediate threats while significantly reducing
the cost and risk associated with cyber security breaches.”

Total Economic Impact is a methodology developed by Forrester Research that
enhances a company’s technology decision-making processes and assists vendors
in communicating the value proposition of their products and services to
clients in terms of cost, benefit, flexibility and risk factors.

The Forrester Consulting “Total Economic Impact of EnCase Cybersecurity for
Incident Response” is available on the Guidance Software website at

About Guidance Software:

Guidance Software is recognized worldwide as the industry leader in digital
investigative solutions. Its EnCase® Enterprise platform is used by numerous
government agencies, more than 65 percent of the Fortune 100, and more than 40
percent of the Fortune 500, to conduct digital investigations of servers,
laptops, desktops and mobile devices. Built on the EnCase Enterprise platform
are market-leading electronic discovery and cyber security solutions, EnCase
eDiscovery, EnCase Cybersecurity, and EnCase Analytics, which empower
organizations to respond to litigation discovery requests, perform sensitive
data discovery for compliance purposes, conduct speedy and thorough security
incident response, and reveal previously hidden advanced persistent threats or
malicious insider activity. For more information about Guidance Software,

EnCase®, EnScript®, FastBloc®, EnCE®, EnCEP®, Guidance Software™ and Tableau™
are registered trademarks or trademarks owned by Guidance Software in the
United States and other jurisdictions and may not be used without prior
written permission. All other trademarks and copyrights referenced in this
press release are the property of their respective owners.



Guidance Software
Brigitte Engel, 626-229-9191

Schwartz MSL

Ross Levanto/Davida Dinerman
Press spacebar to pause and continue. Press esc to stop.