Which of these is not one of the 3 steps in “Management’s Evaluation of Internal Controls over Financial Reporting”?

a. Engage a consulting firm to document the company's internal controls.

b. Provide a report on the effectiveness of internal control over financial reporting.

c. Identify financial reporting risks and controls implemented to mitigate those risks.

d. Evaluate the operating effectiveness of internal control over financial reporting.