(I) the findings of the auditor from such testing;
(II) an evaluation of whether such internal control structure and procedures—
(aa) include maintenance of records that in reasonable detail accurately and fairly reflect the transactions and dispositions of the assets of the issuer;
(bb) provide reasonable assurance that transactions are recorded as necessary to permit preparation of financial statements in accordance with generally accepted accounting principles, and that receipts and expenditures of the issuer are being made only in accord- ance with authorizations of management and directors of the issuer; and
(III) a description, at a minimum, of material weaknesses in such internal controls, and of any material noncompliance found on the basis of such testing