12. LO 8.4 The external auditor of a company has certain requirements due to Sarbanes-Oxley. Which of the following best describes these requirements: A. The auditor is required to only report weaknesses in the internal control design of the company he or she is auditing. B. The auditor must issue an internal control report on the evaluation of internal controls overseen by the Public Company Accounting Oversight Board C. The auditor in charge can serve for a period of only two years. D. The Public Company Accounting Oversight Board reviews reports submitted by the auditors when no evaluations have been performed