10. Under Section 404 of the Sarbanes-Oxley Act, who is required to attest to, and report on, management's assessment of internal control over financial reporting? a. Board of directors b. Audit committee c. The chief executive officer and chief financial officer d. External auditors