If I could interrupt, I'm quoting the Auditor General here: “However, we noted that as a Crown corporation, DCC is not subject to the Government Security Policy unless it enters into an agreement with the Treasury Board”. And you haven't done that. So is this something voluntary that you've just taken upon yourself to do?
On February 26th, 2008. See this statement in context.