Which of the following is true as a result of the passing of the Sarbanes-Oxley Act? O Management must issue a report stating that internal controls are effective. O Auditors must prepare a report stating that internal controls are effective. Auditors are not responsible for reporting on the effectiveness of internal controls. Management is is not responsible for reporting on internal controls