The reports listed under Subparagraphs FC-4.3.1 (a) and (b) must be made by the MLRO. The sample testing required under Subparagraph FC-4.3.1 (c) must be undertaken either by the licensee's internal auditor, its external auditor or a consultancy firm approved by the CBB. The report required under Subparagraph FC-4.3.1 (d) must be made by the licensee's external auditor or a consultancy firm approved by the CBB.