SOX 404 also requires the external auditors to attest and report on the
assessment made by the management. Auditing Standard No. 2 issued by the PCAOB in March 2004 requires, in addition to the attestation of management's report, the auditor to render an
opinion regarding the client's internal control over financial reporting (ICOFR).