A public company's disclosure internal control disclosure requirements in its annual report according to Sarbanes-Oxley Section 404 include which of the following:

A written attestation by the company's board of directors confirming the adequacy and accuracy of its internal controls.

A written attestation by the company's management confirming the adequacy and accuracy of its internal controls.

A written attestation by the company's internal auditor confirming the adequacy and accuracy of its internal controls.

A written attestation by the company's external auditor confirming the adequacy and accuracy of its internal controls.