Under PCAOB standards, the auditor of a public company must also:

✓ Correct Answer: Option B

SOX 404 requires an integrated audit: auditing financial statements AND internal control effectiveness for public companies.