PricewaterhouseCoopers Independent Audit Report to Hitwise

Scope

We have audited the assertions made by the Management of Hitwise Pty Ltd (Management) which are contained in the Management assertion letter dated 27 November 2008 (refer attached) in relation to the Competitive Intelligence Services (Web-ranking processes) for the period 1 August 2007 to 31 July 2008.
 
Management is responsible for maintaining an effective internal control structure including control procedures relating to the integrity of the Web-ranking processes. We have conducted an independent audit in order to express an opinion on the assertions made by Hitwise Pty Ltd.
 
Our audit was conducted in accordance with AUS 810 "Special Purpose Reports on the Effectiveness on Control Procedures" and accordingly included such tests and procedures as we considered necessary in the circumstances. These procedures have been undertaken to form an opinion whether in all material respects, the control procedures in relation to the Web-ranking processes were adequately designed and operated effectively in order to support our opinion on the assertions contained in the Management assertion letter dated 27 November 2008.
 
In accordance with our engagement letter, this report has been prepared solely for Hitwise in relation to its Competitive Intelligence Services (Web-ranking processes). We do not accept any responsibility to Hitwise for any consequences of its reliance on this report for any unintended purpose. Although we have agreed that this report may be displayed on the Hitwise web site (www.hitwise.com ), we note that Australian Auditing Standard AUS 810 is not designed for public reporting.
 
As we have not considered the circumstances of any other person, we do not accept any responsibility for any consequences of reliance on this report by anyone other than Hitwise for any purpose whatsoever.
 
Inherent limitations
 
Because of the inherent limitations in any internal control structure, it is possible that fraud, error, or non compliance with laws and regulations may occur and not be detected. Further the internal control structure, within which the internal control procedures that have been audited operate, has not been audited and no opinion is expressed as to its effectiveness.
An audit is not designed to detect all weaknesses in control procedures as it is not performed continuously throughout the period and the tests performed on the control procedures are on a sample basis.
 
Any projection of the evaluation of the control procedures to future periods is subject to the risk that procedures may become inadequate because of changes in conditions, or that the degree of compliance with them may deteriorate.
 
Findings
 
As part of this audit we have also reported to Management on particular facts and findings in relation to control weaknesses identified surrounding the Web-ranking processes. The identified control weaknesses were not of a significant nature that would warrant the issuance of a qualified audit opinion.
 
Audit Opinion
 
In our opinion, the assertion by Management that Hitwise Pty Ltd has maintained, in all material respects, effective control procedures in relation to the Web-ranking processes for the period 1 August 2007 to 31 July 2008 based on the criteria referred to above, is fairly stated.

Emphasis of Matter
 
Without qualification to our opinion, we draw attention to the management assertion letter which comments on the improvements required to the processing of customer queries.

PricewaterhouseCoopers
5 December 2008

Andrew Elsworth
Partner
Melbourne

Management Assertions
Competitive Intelligence Services Controls Procedures

27 November 2008

During the period August 1, 2007 through July 31, 2008 the Hitwise Service has maintained effective control procedures to:

Methodology and Data Collection

General Computer Operations

  • Ensure company controls relating to general computer operations over systems supporting its Web-ranking processes were designed and operating effectively for the following areas:
  • Change management and program development procedures
  • Privileged access to programs and data
  • Backup and recovery of data collected and used during the Web-ranking process
  • IT security policy

Privacy

Ensure the data collection processes does not include the collection and storage of personal information which would be in contravention of applicable privacy policies where Hitwise websites are hosted.

  • Ensure that the Hitwise privacy policy disclosed on the company websites is in adherence with the following list of regional privacy legislations:
  • United States Federal Privacy Law; New York, California and Texas State Privacy Law
  • United Kingdom: The Data Protection Act 1998; The Privacy and Electronic Communications (EC Directive) Regulations 2003
  • Australia: The Privacy Act 1988; privacy related laws in Telecommunications Act 1997
  • New Zealand: The Privacy Act 1993
  • Hong Kong: Hong Kong Personal Data (Privacy) Ordinance
  • Singapore: Relevant statutes and common law torts (note no overarching privacy or data protection law in Singapore)
  • Ensure design and operating effectiveness of appropriate controls over the maintenance of customer information to ensure:
  • Adequate security of customer information, including usage restrictions
  • Adequate restrictions over customer access to update customer information

Improvements in controls are required in the following area:

Methodology and Data Collection

Improvements are required over the processing of customer queries regarding web ranking information provided on www.hitwise.com. Although there is a process in place to capture all queries from customers there is a need to have more rigour around the documentation maintained within the internal systems to verify that all customer queries are handled in a consistent manner. This requires us to develop a formal procedure which will govern the documentation through the end to end query management process from capture, through resolution and closure.

Yours Sincerely

Harley Giles
Chief Information Officer
Hitwise Pty Ltd

Search White Paper
 
All material © Copyright 1998-2009 Hitwise Pty. Ltd. ABN 41 081 470 117 | Experian Asia Pacific - Careers - Privacy Policy - Site Map