Sarbanes-Oxley does not require companies and their independent accountants to report on the effectiveness of the companies' internal controls. companies to turn over responsibility for establishing and maintaining internal controls for financial reporting to auditors. all publicly-held companies to comply with the Act. companies to file their internal control reports with the 10-K report with the Securities and Exchange Commission Which one of the following is not an element of internal control? a Risk assessment b Reorienting management philosophy away from controls c Monitoring d Control procedures