Both the SEC and The PCAOB require the use of the COSO framework

Any framework can be used that encompasses all of COSO's general themes

The SEC recommends COBIT, and the PCAOB recommends COSO

Both the SEC and PCAOB require the COBIT framework.

None of the above are true.