The Sarbanes-Oxley Act contains provisions for the attestation (verification) and reporting to shareholders of internal controls over financial reporting.

Required

(a) Construct the arguments in favour of Professor Leroi's remark that external reporting requirements on internal controls were 'too ambitious' for small and medium companies.

(b) Describe the typical contents of an external report on internal controls.