Which of the following is not a way by which the sarbanes-oxley act attempts to ensure auditor independence from an audit client? A) the auditing firm must be appointed by the clients audit committee B) audit fees must be approved by the public company accounting oversight board C) the audit committee must be composed of members of the client's board of directors who are independent of the management D) the external auditor cannot also perform financial information system design and implementation work