Which of the following is NOT a requirement in management's report on the effectiveness of internal controls over financial reporting?

a. A statement of management's responsibility for establishing and maintaining adequate internal control user satisfaction.

b. A statement that the organizations internal auditors has issued an attestation report on management's assessment of the companies internal controls.

c. A statement identifying the framework used by management to conduct their assessment of internal controls.

d. An explicit written conclusion as to the effectiveness of internal control over financial reporting.