IN CONTROL

• CMIS is ISAE 3402 type II certified.

• CMIS Group has an above market peer COSO based Risk Assurance Program supported by a technology platform which allows the support management of all risk, compliance and audit programs. The platform provides detailed insights on legal entity, products and process levels.

• CMIS Group’s audited Business Continuity Planning is based on the industry's best practice. In addition, the information security framework has adopted the ISO 27001 and 27002 standards.

• Several legal entities within CMIS Group are licensed and regulated by the Dutch Authority for the Financial Market.

• CMIS Group has the following Fitch Ratings: Primary Servicing RPS2, Special Servicing RSS2+ and Master Servicing MS2+.