Sarbanes-Oxley Act requirements include:

(a) a prohibition on the audit firm carrying out non-audit services.

(b) mandatory rotation of lead audit partners.

(c) an internal control report including a statement of management’s responsibility for establishing and maintaining adequate internal control.

(d) all of the above.