Which of the following is not a major provision of Sarbanes$-$Oxley

The requirement that financial reports are certified by the chief executive and chief financial officers.

The obligation to have an internal audit that is then certified by external auditors.

The requirement that all physicians serve at the will and pleasure of the governing body.

The provision for criminal and civil penalties for securities violations.