Will RiskMetrics Group continue their SAS70 Type II audit?
• A: • Yes. RiskMetrics has robust and scalable processes to manage the operations and administration of the Governance Infrastructure. The operations teams are currently under a SAS70 audit for 2009 and will conduct a 2010 SAS70 Type II audit for 2010. We have exception free SAS70 Type II audits for 2007 and for 2008 as well. • The Governance services division has been under a continuous SAS70 Type II audit since 2007 and received exception free reports in both 2007 and 2008. We are currently under review for the 2009 period and will hope to have results of that audit in several months. The period for 2009 will run from 1/1/2009 to 10/15/2009 and our 2010 SAS70 audit will begin again in Early 2010. Historically we have run contracts with our SAS70 auditors for a period of three years and as part of our business practice, evaluate our auditors at the end of that three year contract. We are currently going through that review and will be using the end of 2009 to select our auditors and
