Please confirm that we have a problem (or not). The Identity Theft Prevention Program annual report to the board, prepared last month, is based on 2009 trends, but the risk assessment contains only 2008 figures. My take is that the risk assessment should contain the YTD 2009 figures and corresponding trends since this is the document that substantiates both the Program and the Annual Report dated Oct. 2009. I am told that this is not necessary. Can you please confirm or clarify?

Thank you so much for your help.