The reports listed under Subparagraphs FC-4.3.1 (a) and (b) must be made by the MLRO. The sample testing required under Subparagraph FC-4.3.1 (c) must be undertaken either by the licensee's internal audit function or its external auditors. The report required under Subparagraph FC-4.3.1 (d) must be made by the licensee's external auditor.