So by the time this audit was done, sir, there still wasn't a security checklist. Either the Auditor General's statement is misleading, or you didn't get the job done in terms of the security checklist. It's one or the other.
On February 26th, 2008. See this statement in context.