News release

HP Expands North American Security Consulting Practice

Employees from Internet Security Advisors Group Join HP Consulting

PALO ALTO, Calif., Oct. 29, 2001

Hewlett-Packard Company (NYSE:HWP) today unveiled an expanded HP North American Security Consulting Practice to help customers operate securely and successfully in today's ever-changing and challenging business environment.

As an added dimension to the HP Global Security Consulting Practice, the goal of the North American practice is to help organizations develop an appropriate level of security based on their business requirements. Due to concerns about privacy, fraud and hacking, security is vitally important to American businesses today. HP brings more than a decade of experience in securing global business assets, an award-winning portfolio of services and the latest technologies to its clients.

To enhance its security consulting capabilities further, HP recently completed a hiring program with leading boutique security consulting firm Internet Security Advisors Group. The firm's former chief executive officer, Ira Winkler, has joined HP as chief strategist for the HP North American Security Consulting Practice. Winkler is an influential leader in the security field and the author of several popular books on information security.

HP's expansion also includes the creation of a security services center that will provide state-of-the-art research capabilities, penetration testing capabilities, and assessment resources to proactively strengthen client infrastructure security on an ongoing basis. The center is located in Bellevue, Wash., and is scheduled to open in November. The security services center builds on the success of a similar HP center opened in Hong Kong last year.

"With a proven track record in information security, combined with a holistic view of people, processes and technology, HP has the expertise to manage complex enterprise security engagements," said Lois Boliek, practice principal, HP North American Security Consulting Practice.

The North American practice is providing both defined and customized offerings that can be purchased as stand-alone engagements or enterprise security solutions, or integrated into HP's overall e-services offerings. These offerings include:

• Security awareness seminars, discovery workshops and assistance with security strategy and policy development;

• Risk mitigation services, including risk and vulnerability assessment, penetration testing, information security risk assessment, security infrastructure assessment, firewall functionality assessment, telecom access assessment and wireless access assessment;

• Infrastructure services, including security architecture design, host hardening, product recommendations, IT management for security and security product implementation and integration;

• Security integration services, including PKI, portal solutions, authentication and authorization, wireless solutions, smart card integration, directory services and Internet data center security;

About HP

Hewlett-Packard Company -- a leading global provider of computing and imaging solutions and services -- is focused on making technology and its benefits accessible to all. HP had total revenue from continuing operations of $48.8 billion in its 2000 fiscal year. Information about HP and its products can be found on the World Wide Web at http://www.hp.com.

This news release contains forward-looking statements that involve risks, uncertainties and assumptions. All statements other than statements of historical fact are statements that could be deemed forward-looking statements. Risks, uncertainties and assumptions include the possibility that the market for the sale of certain products and services may not develop as expected; that development of these products and services may not proceed as planned; and other risks that are described from time to time in HP's Securities and Exchange Commission reports, including but not limited to the annual report on Form 10-K for the year ended Oct. 31, 2000, and subsequently filed reports. If any of these risks or uncertainties materializes or any of these assumptions proves incorrect, HP's results could differ materially from HP's expectations in these statements. HP assumes no obligation and does not intend to update these forward-looking statements.