Which of the following is NOT a Sarbanes Oxly Act requirement?

(a) An internal audit report that confirms that management did not review financial statements before they were published.

(b) An external audit evaluates management's assessments of the effectiveness of the system of internal control.

An internal control report included in the annual financial statements.

(d) An external audit that includes a disclosure of internal control deficiencies.