Which law or regulation requires that public companies must maintain strong internal control​ systems?.