(a)

an indication on which records are kept and for how long; and

(b)

an identification of the recipients of confidential information for each rating issued.

(a)

description of the procedures to ensure continuity and regularity in the performance of the credit rating activities, including information on their applicability to service providers to which activities have been outsourced;

(b)

the types of business continuity planning tests expected to be conducted; and

(c)

the frequency of testing.

(a)

the identity of the senior manager responsible for the information processing systems;

(b)

a description of the information processing systems including any back-up systems; and

(c)

a description of effective control and safeguard arrangements for the information processing systems in place as well as the mechanisms to monitor their effectiveness, including details of the procedures in place to ensure effective separation between the information processing systems used to report fees from those accessible to rating analysts and used to enter ratings and information about the rated entities or rated transactions.