(b) The Sarbanes-Oxley Act contains provisions for the attestation (verification) and reporting to shareholders of internal controls over financial reporting. Required: Describe the typical contents of an external report on internal controls. (8 marks)