I don't have the straight link to point, but here in UK that is the requirement as per the Sarbanes-Oxley Act (SOX) requirement and you might check within your Audit requirement for such information. If I get more information I will update it here.