According to the provisions of the Sarbanes-Oxley Act,

accounting firms can provide both audit and non-audit services to the same company.

the auditor should report directly to, and have its work overseen by, the company's management.

audit committees should be composed of non-management members of a company's board of directors.

both the lead audit partner and the audit review partner for publicly held companies should be rotated at least every two years