http://riskoversightsolutions.com 1

Risk Oversight Overview

We are Risk Oversight Inc. – A better response to risk

Risk Oversight (formerly CSOX Solutions Inc.) was formed in 2005 in Calgary. Since its

inception, Risk Oversight has grown to lead audit and compliance based projects for over forty (40) public companies in Calgary. From the beginning of our company, the

focus of Risk Oversight has always been on excellence in outsourced Internal Control, Internal Audit and Compliance-Based programs. We bring extensive experience and

materials to help our clients to run these projects and provide exceptional reporting and transparency to their Senior Management and Boards of Directors.

Our consultants bring a variety of backgrounds but each has a specialty in one more

areas of Accounting, Audit, Compliance, or IT. Our consultants are all experienced with many years of experience in their respective fields. Our backgrounds are primarily

professional Accountants (CPAs) with others with designations including the CIA, PMP, CRMA, CISA and LLB.

A selection of Risk Oversight clients include: Suncor Energy, Nexen CNOOC Ltd., Repsol (formerly Talisman), Cenovus, Superior Propane, Gibsons, Maxim Power, Husky,

Stantec, Baytex, Crew Energy, Tervita, Pure Energy Services, InterPipeline Fund, Alberta Credit Unions Central, Northern Property REIT, Africa Oil Corp., and Trican Well

Service.

More Information?

For more information about Risk Oversight, please contact Neil Bothwell, Managing

Director, neil.bothwell@riskoversight.ca or else visit our website at http://riskoversightsolutions.com.

2 www.riskoversight.ca

Risk Oversight Services

Risk Oversight’s services focus on risk and control management, internal assurance and

training support for Boards, Management, and Internal Audit and Compliance professionals. Our key services are outlined below:

Outsourced Sarbanes-Oxley (SOX) 404 & Canadian NI 52-109 (CSOX)

Risk Oversight has managed, led and provided outsourced support for numerous SOX and CSOX projects for our Calgary-based of a variety of size and industries. We run complete

outsourced CSOX/Internal Control programs for numerous mid-sized clients with our package of services including; process and policy documentation, test of design

effectiveness, definition and refinement of key controls, testing of controls including detailed transactional testing, and formal reporting to Senior Management and the Audit

Committee and Board.

Internal Audit Outsourcing and Support Risk Oversight supports our clients’ existing Internal Audit teams and also provides

outsourced Internal Audit capabilities to support Management and the Board’s needs. We

strive to streamline Internal Audit planning to focus resources where they’re really needed therefore providing our clients with a very cost-effective Internal Audit model. We have

engaged in a variety of Internal Audit projects in the past, including:

Procurement audits Corporate credit card audits

Vendor audits Contract reviews

IT audit risk and strategy assessments Process flow and diagraming projects

Internal control and process reviews

Outsourced IT Audit Risk Oversight provides our clients with complete solutions for outsourcing their IT Audit

programs including assessment and testing of IT General Controls (ITGCs) and IT

application controls, in addition to the testing of interfaces, reports and spreadsheets. We work with our clients to develop IT Audit programs that align with our clients’ risks and

financial controls and with current best practices based on changes to technology, technology risks and current methodologies.

3 www.riskoversight.ca

Risk Oversight Services

Fraud Investigation and Assessment Risk Oversight provides fraud investigation services for our clients including support for

Management’s need to understand specific cases where fraudulent activities may have

been discovered or suspected within the Company. This includes a detailed review of the relevant documentation, analysis of the breakdown in controls, recommendations for

improvement, and formal reporting to improve the control environment and prevent future frauds. In addition, Risk Oversight brings experience in helping our clients to

assess their fraud risk through reviews including interviews and surveys.

Process and Policy Documentation Risk Oversight has a strong reputation and brings considerable expertise in creating

exceptional documentation to support the needs of our clients. We believe in helping our clients ensure that their documentation is accurate, clear, understandable and relevant.

We complement our process documentation with strong visuals including process diagrams. In addition, Risk Oversight brings considerable experience in helping our

clients to define policies and practices. We create exceptional policies that are enforceable, engaging and reflective of our clients’ needs.

Implementation Support Risk Oversight brings expertise in supporting our clients with special projects specifically

with a financial component including ERP and financial system implementations. Risk Oversight assists clients to design and implement the financial controls and processes

that they need to support their systems and help clients conduct post implementation reviews.

Enterprise Risk Management (ERM)

Risk Oversight helps our clients to define ERM programs aligned with their risk tolerances and appetites. Our professionals have experience offering risk management skills training

and knowledge to help sort through the pros and cons of different ERM approaches and tools. This support helps our clients to create and maintain strong Entity-Level programs

suitable to the size and needs of their organizations.

Board Risk Reporting and Support

Risk Oversight has expertise to help Boards respond to new expectations in risk oversight. As part of our support, we perform gap assessments including comparing your

current oversight practices against emerging expectations and analyzing your oversight gaps. Our risk management support services include supporting our clients’ reporting

practices on the outcome and issues of Internal Control, Internal Audit and Fraud Risk Assessments.