(ii) the nationalities of the members of the board of directors or other governing body; (d) include a statement of expertise and experience of the applicant, including the identification of, job descriptions and curriculum vitae of management and other key personnel as well as the agents; (e) include a declaration that the applicant employs operative personnel who have not been convicted of an offence in Uganda or any other country involving fraud, a false statement, deception or any felony; (f) include a description of the proposed services to be provided, which may include issuing certificates only or issuing certificates and ancillary services, such as repository services or date or time stamp services, as well as detailed operating procedures for the proposed services; (g) include a description of the technical specifications of hardware and software systems, including a description and location of facilities, and indicate any standards that the systems or facilities comply with; (h) include policies for information security, privacy, physical security, and disaster recovery; (i) include a statement setting out the proposed costs and financing; (j) provide proof of adequate insurance cover; (k) include a report from a qualified auditor certifying that the prescribed licensing and qualification requirements set out in the Act and these regulations have been satisfied; and (l) include any other information the applicant believes might be relevant to the Controller in considering the application. (3) Every application shall be accompanied by the fees specified in Schedule 2. (4) The Controller may request further information or documentation, which shall be provided by the applicant to the Controller in the time and the manner set out by the Controller.