(1) Extent of documentation for evaluation – The certifying officers should generally maintain documentary evidence sufficient to provide reasonable support for their certification of a DC&P and ICFR evaluation. The extent of documentation used to support the certifying officers’ evaluations of DC&P and ICFR for each annual certificate will vary depending on the size and complexity of the issuer’s DC&P and ICFR. The extent of documentation is a matter of judgment for the certifying officers, acting reasonably.
(2) Documentation for evaluations of DC&P and ICFR – To provide reasonable support for a DC&P or ICFR evaluation the certifying officers should generally document:
(a) a description of the process the certifying officers used to evaluate DC&P or ICFR;
(b) how the certifying officers determined the extent of testing of the components of DC&P or ICFR;
(c) a description of, and results from applying, the evaluation tools discussed in sections 7.6 and 7.7 of the Policy or other evaluation tools; and
(d) the certifying officers’ conclusions about:
(i) the operating effectiveness of DC&P or ICFR, as applicable; and
(ii) whether a material weakness relating to the operation of ICFR existed as at the end of the period.