Which of the following is NOT a requirement in management’s report on the effectiveness of internal controls over financial reporting?

a. A statement of management’s responsibility for establishing and maintaining adequate internal control user satisfaction.

b. A statement that the organization’s internal auditors have issued an attestation report on management’s assessment of the company’s internal controls.

c. A statement identifying the framework management uses to conduct its assessment of internal controls.

d. An explicit written conclusion as to the effectiveness of internal control over financial reporting.