Press Release

CKE Restaurants Selects ControlScan for Payment Security and PCI Compliance Services

ControlScan PCI 1-2-3 will support QSR franchise system that includes Hardee's, Carl's Jr.

ATLANTA, May 8, 2013 - The security of customers' personal information is a serious concern in the quick-service restaurant (QSR) industry, where the ability to accept credit and debit card payments is critical to business success. For QSR franchisees, payment card acceptance produces a significant percentage of total sales revenue. In addition, customers who pay by credit or debit tend to spend more than those who use cash.

CKE Restaurants Holdings, Inc. owns, operates and franchises some of the most popular QSR brands, including the Carl's Jr.®, Hardee's®, Green Burrito® and Red Burrito® restaurant brands. Recognizing the importance of its franchise stores' security posture, CKE has signed an agreement with ControlScan to directly deliver independent, qualified payment security and PCI DSS compliance services to select stores within the company's franchise system.

Atlanta-based ControlScan is recognized for its high-touch approach to helping small and mid-sized business owners and franchisees understand, navigate and complete their obligations of the Payment Card Industry Data Security Standard (PCI DSS). As part of its newly signed agreement with ControlScan, CKE will fund individual franchisee delivery of the ControlScan PCI 1-2-3 program.

"Our new agreement with ControlScan helps remove barriers to payment security and PCI compliance at the store level by giving our franchisees easy access to expert, step-by-step guidance and support," said Tom Lindblom, chief technology officer for CKE Restaurants Holdings, Inc.

"Security of our customers' credit card data has always been a high priority for us and hence we are making additional investments in this initiative on behalf of our franchises," Lindblom continued. "We want our customers to confidently use their debit and credit cards at all our restaurants. ControlScan will work with our franchises to further enhance security, based on widely accepted and dynamically evolving PCI-DSS guidance."

"Like any small business owner, the restaurant franchisee needs steadfast support in the form of education, easy-to-use products and support services that simplify the complexity of PCI compliance," said Jethro Felton, executive vice president, sales and business development, ControlScan. "We are excited to work with CKE Restaurants' franchisees to raise the security posture of each store, which will in turn benefit the CKE system as a whole."

About ControlScan
Headquartered in Atlanta, ControlScan delivers unified security and compliance solutions that help small and mid-sized businesses secure sensitive data and comply with information security and privacy standards. We support business owners, franchisees and merchant service providers with technology, services and expertise for PCI DSS, HIPAA and EI3PA compliance; vulnerability detection and risk mitigation; POS, e-commerce and mobile security; and more. For more information, please visit ControlScan.com or call 1-800-825-3301.

About CKE Restaurants Holdings, Inc.
CKE Restaurants Holdings, Inc. is a privately held company headquartered in Carpinteria, Calif. As of January 28, 2013, the Company, through its subsidiaries, had a total of 3,318 franchised or company-operated restaurants in 42 states and 28 foreign countries and U.S. territories worldwide. For more information about CKE Restaurants, please visit www.ckr.com.