Public Accounts committee  I'll certainly do what I can. I hope the committee understands and respects that I don't have access to my former inbox at Treasury Board, so I can't provide the records themselves. I can certainly do my best to summarize what I recall.

Public Accounts committee  If you don't mind me adding, for the cybersecurity assessment work, just to reiterate what I said earlier, I had a mix of some secret-cleared people who were doing more of the hands-on work, with the rest of the staff at the reliability level.

Public Accounts committee  No.

Public Accounts committee  Thank you for the member's question. All of our results were shared directly with the CBSA, but I can't speak to who they shared them with after that.

Public Accounts committee  Similarly, when you say “algorithm”, I just want to clarify that KPMG didn't create or edit any code for the ArriveCAN app. Our work was more of an assessment after the code was developed to confirm that the code complied with the Government of Canada's security standards and policies.

Public Accounts committee  That is correct.

Public Accounts committee  I don't know the details. I'll ask Ms. Lee after this to provide whatever details she can about our acceptance processes, which are executed by another team. My understanding is that they look into a variety of factors, including the board of directors or C-suite, any kind of—

Public Accounts committee  My understanding is that they look for any public lawsuits, adverse media attention or things of that nature. However, Ms. Lee, please, if I'm missing anything in our....

Public Accounts committee  At that given time, given that these are point-in-time assessments, nothing of concern was raised.

Public Accounts committee  That's correct.

Public Accounts committee  At that time, my understanding was that he was exploring a variety of procurement options—

Public Accounts committee  That's correct. At the time, we were exploring going out to full RFP, using the CEPS vehicle or using GC Strategies. Those were the three options.

Public Accounts committee  For me, personally, that was my first time, but as our written response stated, our firm has subcontracted in the past with approximately 13 companies.

Public Accounts committee  Thank you for the member's question. Just to clarify, our work at KPMG was a cybersecurity assessment post-development of the application itself, so I can't really comment on how it sped up the development of the app. I can comment on the fact that we did help identify areas for improvement to enhance the security of the application for the benefit of Canadian citizens who used it.

Public Accounts committee  No, sir, they did not.