Which of the following is not a change introduced by the Sarbanes-Oxley Act?

Management evaluate and report on the effectiveness of internal control over financial reporting.

Publically traded companies must have their financial statements audited.

The company's board of directors is required to establish an audit committee comprised of independent directors.

Public companies must have tip lines that allow employees to secretly submit concerns about questionable accounting or auditing practices.