Trust Services Certification

print

Certification

Report of Independent Accountants

We have examined management's assertion that Covisint, during the period September 1, 2002 through October 31, 2002, maintained effective controls over the Covisint Portal and related applications (Covisint Portal) to provide reasonable assurance that:

• The Covisint Portal was available for operation and use as committed or agreed;
• The Covisint Portal was protected against unauthorized access (both physical and logical);
• The Covisint Portal processing was complete, accurate, timely, and authorized; and
• Information designated as confidential is protected as committed or agreed,

based on the AICPA/CICA Trust Services Availability, Security, Integrity and Confidentiality Criteria, and that Covisint maintained effective controls to provide reasonable assurance that:

• Investor access to the Covisint Portal is governed by the same policies, procedures and activities as other registered members of the Covisint exchange, and
• Investors are only able to access information relating to their specific activities on the Covisint Portal,

based on the criteria set forth in Investor Access to the Covisint Portal. This assertion is the responsibility of the Covisint's management. Our responsibility is to express an opinion based on our examination.

Our examination was conducted in accordance with the attestation standards established by the American Institute of Certified Public Accountants and, accordingly, included (1) obtaining an understanding of the Covisint's relevant availability, security, integrity, confidentiality and investor access controls, (2) testing and evaluating the operating effectiveness of the controls, and (3) performing such other procedures as we considered necessary in the circumstances. We believe that our examination provides a reasonable basis for our opinion.

Because of the inherent limitations of controls, errors or fraud may occur and not be detected. Furthermore, the projection of any conclusions based on our findings to future periods is subject to the risk that the validity of such conclusions may be altered because of changes made to the system or controls, the failure to make needed changes to the system or controls, or a deterioration in the degree of effectiveness of controls.

In our opinion, Covisint management's assertion referred to above is fairly stated in all material respects, based on the AICPA/CICA Trust Services Availability, Security, Integrity and Confidentiality Criteria, and criteria set forth in Investor Access to the Covisint Portal.

November 15, 2002

 

« Back