OICY2KRAMP

PUBLIC CONSULTATION 1 RESPONSES

There were 41 registrations for the 1st Public Consultation of OIC.Y2K.RAMP on 19-20 January 1999.

29 organisations attended the 5 sessions. 6 of those organisations provided a response immediately after the Public Consultation. The 6 responses are provided after the analysis table:

Analysis Responses: YES NO

Q1 What process acceptable

Q2 What does organisations require:

i Certificate 4

ii Evidence Y2K checking and remediation compliance 3

iii View Y2K progress on secure Web site 3

Q3 Is OICY2KRAMP a suitable process 4 2

Q4 Enhancements if not suitable

Q5 Will organisation show trading partners Y2K status 4

Q6 Would organisation like to view trading partners progress 5 1

Q7 Is Government endorsement required for OICY2KRAMP 1 5

This list will be updated weekly when the responses are faxed, e-mailed or lodged from the Questionnaire Web page

RESPONSE A:

JULIE WILKIE - NRMA

Q1 What process would be acceptable to your organisation to confirm that its trading partners have completed due diligence in Y2K compliancy checking and remediation ?

A1 A STANDARD WHICH THEY MUST ASSESS THEIR ACTIONS AGAINST AND PROVIDE TO THEIR CUSTOMERS.

Q2 Would your organisation require:

i A certificate ? YES, OR

ii Evidence of Y2K Compliancy Checking and Remediation ? YES

iii To view Y2K progress on a secure web site ?

Q3 Is the OICY2KRAMP Y2K due diligence check and remediation process a suitable process for Y2K Due Diligence Authentication ?

A3 YES

Q4 What enhancements would you propose

i BETTER USE OF PERIPHERALS TO RECORD LIFTS, SECURITY AND BUILDING MANAGEMENT SYSTEMS, COMMUNICATION NETWORKS & TELEPHONE SYSTEMS

ii SECTION TO RECORD IF COMPONENT SEEN AS 'AT REST' HAVE CONTINGENCY PLANS BEEN ESTABLISHED?

Q5 Is your organisation prepared to provide its trading partners with details of progress with Y2K check and remediation status ?

A5 TO AN EXTEND BASED ON RECEIVING REMINDER INFO

Q6 Would your organisation wish to view its trading partners progress with Y2K compliancy?

A6 YES

Q7 Is this process and a Y2K Due Diligence Certificate (Y2KDDC) acceptable without Federal or State Government endorsement ?

A7 YES - I DON'T THINK GOVERNMENT WOULD AGREE TO THIS - WE'D BE HAPPY TO TAKE INFO FOR FACE VALUE.

RESPONSE B:

NOEL CROWE - ACE INTERNET SERVICES

Q1 What process would be acceptable to your organisation to confirm that its trading partners have completed due diligence in Y2K compliancy checking and remediation ?

A1 OIC Y2K RAMP

Q2 Would your organisation require:

i A certificate ? YES

ii Evidence of Y2K Compliancy Checking and Remediation ?

iii To view Y2K progress on a secure web site ? yes

Q3 Is the OICY2KRAMP Y2K due diligence check and remediation process a suitable process for Y2K Due Diligence Authentication ?

A3 YES

Q4 What enhancements would you propose

i AUTOMATIC DATA PULL-DOWN BETWEEN RAMP & CHECK S/W

ii ASSISTANCE WITH REMEDIATION PROCESS FOR CLIENTS

iii PUBLICITY-AWARENESS-DIRECTOR CO-OPERATION TOGETHER TO PROMOTE IT

Q5 Is your organisation prepared to provide its trading partners with details of progress with Y2K check and remediation status ?

A5 YES

Q6 Would your organisation wish to view its trading partners progress with Y2K compliancy?

A6 YES

Q7 Is this process and a Y2K Due Diligence Certificate (Y2KDDC) acceptable without Federal or State Government endorsement ?

A7 YES

RESPONSE C:

Q1 What process would be acceptable to your organisation to confirm that its trading partners have completed due diligence in Y2K compliancy checking and remediation ?

A1 .....................................................................................................................................................

Q2 Would your organisation require:

i A certificate ?

ii Evidence of Y2K Compliancy Checking and Remediation ? YES

iii To view Y2K progress on a secure web site ? YES

Q3 Is the OICY2KRAMP Y2K due diligence check and remediation process a suitable process for Y2K Due Diligence Authentication ?

A3 YES

Q4 What enhancements would you propose

i TARGET DATES ........................................................................................................................................

ii DOES NOT ADDRESS THE ITEMS CRITICAL TO CONTINUITY OF SUPPLY (i.e. MANUFACTURING SYS & EQUIP, BUSINESS APPLICATIONS)

iii ........................................................................................................................................ .........................................................................................................................................

Q5 Is your organisation prepared to provide its trading partners with details of progress with Y2K check and remediation status ?

A5 NEED TO CHECK

Q6 Would your organisation wish to view its trading partners progress with Y2K compliancy?

A6 NO...............................................................

Q7 Is this process and a Y2K Due Diligence Certificate (Y2KDDC) acceptable without Federal or State Government endorsement ?

A7 PROBABLY

RESPONSE D:

Q1 What process would be acceptable to your organisation to confirm that its trading partners have completed due diligence in Y2K compliancy checking and remediation ?

A1 EMBEDDED SYSTEMS AW&T, CORE BUSINESS SYSTEMS & PC SYSTEMS, IN THIS ORDER

Q2 Would your organisation require:

i A certificate ? Y PROVIDED WE COULD TRUST IT

ii Evidence of Y2K Compliancy Checking and Remediation ?

iii To view Y2K progress on a secure web site ?

Q3 Is the OICY2KRAMP Y2K due diligence check and remediation process a suitable process for Y2K Due Diligence Authentication ?

A3 NO

Q4 What enhancements would you propose

i WHAT IS YOUR DEFINITION OF COMPLIANCE? ........................................................................................................................................

ii ........................................................................................................................................ ........................................................................................................................................

Q5 Is your organisation prepared to provide its trading partners with details of progress with Y2K check and remediation status ?

A5 LEGAL ADVICE WOULD BE REQUIRED

Q6 Would your organisation wish to view its trading partners progress with Y2K compliancy?

A6 YES, PROVIDED IT WAS CONCISE AND EASY TO EVALUATE

Q7 Is this process and a Y2K Due Diligence Certificate (Y2KDDC) acceptable without Federal or State Government endorsement ?

A7 PROBABLY NOT

RESPONSE E:

Q1 What process would be acceptable to your organisation to confirm that its trading partners have completed due diligence in Y2K compliancy checking and remediation ?

A1 TAKE INTO CONSIDERATION HARDWARE, SOFTWARE, EMBEDDED SYSTEMS AND SUPPLIERS

Q2 Would your organisation require:

i A certificate ? NO

ii Evidence of Y2K Compliancy Checking and Remediation ? NO

iii To view Y2K progress on a secure web site ? NO

Q3 Is the OICY2KRAMP Y2K due diligence check and remediation process a suitable process for Y2K Due Diligence Authentication ?

A3 NO - IT IS OK FOR THE DESKTOP, BUT NOT FOR THE MAINFRAME APPLICATIONS AND CUSTOM BUILT APPLICATIONS.

Q4 What enhancements would you propose

i INCLUDE EMBEDDED SYSTEMS

ii INCLUDE SUPPLY CHAIN

iii INCLUDE MAINFRAME APPLICATIONS

iv INCLUDE CUSTOM BUILT APPLICATIONS

Q5 Is your organisation prepared to provide its trading partners with details of progress with Y2K check and remediation status ?

A5 YES, VIA FACE TO FACE MEETINGS OR ASX REPORT

Q6 Would your organisation wish to view its trading partners progress with Y2K compliancy?

A6 YES, AGAIN VIA FACE TO FACE MEETINGS

Q7 Is this process and a Y2K Due Diligence Certificate (Y2KDDC) acceptable without Federal or State Government endorsement ?

A7 YES, BUT ONLY FOR DESKTOP APPLICATIONS, AND THAT IS ONLY A PART OF IT.

RESPONSE F:

Q1 What process would be acceptable to your organisation to confirm that its trading partners have completed due diligence in Y2K compliancy checking and remediation ?

A1 .....................................................................................................................................................

Q2 Would your organisation require:

i A certificate ? YES

ii Evidence of Y2K Compliancy Checking and Remediation ? YES

iii To view Y2K progress on a secure web site ? YES

Q3 Is the OICY2KRAMP Y2K due diligence check and remediation process a suitable process for Y2K Due Diligence Authentication ?

A3 YES Q4 What enhancements would you propose

i OIC LIABILITY ISSUES RE. CLIENT ASSET DATA

ii OICY2KRAMP PROCESS - IF H/W FAILS, CANNOT GO TO O/S & APP. TESTING UNTIL PASSED

Q5 Is your organisation prepared to provide its trading partners with details of progress with Y2K check and remediation status ?

A5 YES

Q6 Would your organisation wish to view its trading partners progress with Y2K compliancy?

A6 YES

Q7 Is this process and a Y2K Due Diligence Certificate (Y2KDDC) acceptable without Federal or State Government endorsement ?

A7 NOT ON ITS OWN, NEEDS FORMALISATION