Final answer:
External auditors are required to audit both the company's financial statements and its internal control assessment, with mandates like the SOX Act requiring such reviews especially for public companies.
Step-by-step explanation:
True. External auditors are indeed required to audit both the financial statements of a company and its internal control over financial reporting, especially for public companies. This is mandated by various laws and regulations, such as the Sarbanes-Oxley Act of 2002 (SOX) for publicly traded companies in the United States. Auditing the internal control assessment involves assessing the effectiveness of the company's internal controls related to financial reporting to ensure that the financial statements are free from material misstatement.