ANNUAL REPORT <strong>2009</strong> / ISAGEN S.A. E.S.P.266. CONTROL MECHANISMS6.1. INTERNAL CONTROLAlong <strong>2009</strong>, the Company’s CorporateControl System reasonably helped guaranteethe efficiency and efficacy of operations,protection and safeguarding of resources,reliability and opportunity of information,management improvement, and permanentfollow-up of compliance with policies, regulation,and internal rules.The Board of Directors, the Audit Committee,the Management Committee and theOrganizational Audit Unit were in charge ofmonitoring this system.The Organizational Audit team evaluatedand advised processes in the areas of risks,controls, and governance, conducting evaluations,coordinating external control entities,and participating in corporate committeesand projects.In <strong>2009</strong>, the scope of the work program ofthe Organizational Audit covered all of theOrganization’s processes. Compliance withthe <strong>Annual</strong> Audit Plan to evaluate the corporatecontrol system was 99.62%.The indicator that measures compliancewith the improvement plans defined by theprocesses in response to the observationsand improvement opportunities resultingfrom the evaluations was 98%. Also, the in-dicator that measures effectiveness of improvementactions implemented was 96%according to its latest evaluation.6.2. INTEGRAL RISKMANAGEMENTThe year <strong>2009</strong> was one of reflection for theIntegral Risk Management System and eachone of its elements, aimed at guaranteeingoperating availability at its fullest, as well ascontinued business operation.The inventory of corporate risks included 60risks related to 17 strategic goals, which arein turn grouped in 4 perspectives, includingas well, not only risks related to theOrganization, but also external risks.Management of those risks involved implementationof 42 action plans defined sincethe <strong>2009</strong> – 2013 planning phase.Work during the year included a diagnosis ofRisk Management which produced an improvementplan so that the System will adopt“better practices” and contribute to productionof valuable information for decisionmakingby the Company as a fundamentalmaterial for implementation and focus of theaudits, among others. Implementation of theproject will take place in two stages, and itstarted out by late <strong>2009</strong>. The full work plan isscheduled to finish in the first half of 2011.Additionally, work was done on the programscorresponding to emergency and contingencyplans as well as crisis management.As in the previous year, monitoring of IntegralRisk Management and the Continuity Planby the Audit Committee of the Board ofDirectors went on by semesters.Prevention and control of Assetlaundering and terrorism financingIn <strong>2009</strong>, the Board of Directors approved anew version of the System for Preventionand Control of Asset Laundering andTerrorism Financing (SIPLA, for its Spanishinitials), which includes the latest decisionsby the Colombian Financial Superintendencyfor securities issuers like ISAGEN, andsome voluntary measures, all leading to preventionof asset laundering and terrorism financing(LA/FT, for its Spanish initials).Additionally, a clause was included in thecontract with the trustee administering theissue, establishing LA/FT control measureson operations conducted with securities bythe shareholders.Topics related to applicable measures, responsibilities,report proceedings, and legalconsequences of LA/FT were disclosed.The Audit Committee approved the WorkPlan for the year and followed it up alongthe period.Contents Letter from the CEO Achievements<strong>2009</strong>Good GovernancePractices EvaluationCorporateManagementFinancial Management
ANNUAL REPORT <strong>2009</strong> / ISAGEN S.A. E.S.P.276.3. EXTERNAL CONTROL6.3.1. Statutory AuditorThe Shareholders’ Meeting held on March 24of <strong>2009</strong> appointed audit firm Deloitte as theStatutory Auditor; it started functions on April1 of <strong>2009</strong>.Along <strong>2009</strong>, the Statutory Auditor exercisedits functions in an independent, autonomousway, according to the functions assigned toit by law; no situations of incompatibility orinability rose in relation to it.As a result of its evaluations conductedalong the year, the Statutory Audit Officefound no material deviation in the operationof the Corporation, nor in the course of itsbusiness.The Audit Committee, in compliance with itsresponsibilities, checked the Statutory Auditwork plan for the year <strong>2009</strong>, the results of itsevaluations, and its independence. It alsoevaluated the delivery of its services, withpositive results.As a result of the work carried out during<strong>2009</strong>, the Statutory Auditor issued an unqualifiedopinion on the Financial Statements,saying that they reasonably reflect theCompany’s financial situation as ofDecember 31 of <strong>2009</strong>.6.3.2. Superintendency ofDomiciliary Public UtilitiesAs result of the work conducted in <strong>2009</strong>, theManagement and Results External Auditor,concluded:The degree of development of theCompany’s internal control system is adequate,corporate control is strong, andcompliance with the control objectivesestablished by the Management, andwith the aspects indicated by Law 142 of1994, as well as Resolution 053 of 2000issued by the Energy and Gas RegulatoryCommission –CREG–, was effective.The Company’s risk level as of Decemberof <strong>2009</strong> is low.ISAGEN has an adequate corporate riskmethodology that allows identification,assessment, treatment and monitoring ofthose events that represent an attemptagainst corporate objectives.No situations were observed that may jeopardizethe Company’s financial viability.The Company shows an adequate workstructure; its competitive strategy agreeswith its mission and vision; the Board ofDirectors and Management are well focusedon the Company’s growth strategy;the Company carried out its corporatepurpose abiding by the provisions of theBylaws and Laws 142 and 143 of 1994.The Company complies with the currentratio and the financial expenses coverageindicators. Operating margin indicatorsas well as accounts receivable andaccounts payable turnovers do not meetthe reference set by the Superintendencyof Domiciliary Public Utilities, althoughthey show adequate level according to theCompany’s management policies.6.3.3. National GeneralAuditing OfficeIn <strong>2009</strong>, the Integrated Opinion of theNational General Auditing Office brought toa close the Company’s account for fiscalyear 2008. A favorable and unqualified opinionwas issued, just like the previous year.Management of processes was rated asfavorable.Mission management is duly developedin the strategic goals.The Company’s management of contractsadjusted to regulation in force.Contents Letter from the CEO Achievements<strong>2009</strong>Good GovernancePractices EvaluationCorporateManagementFinancial Management