OraSure Technologies (OSUR)

(b) Management’s Report on Internal Control Over Financial Reporting.

The Company’s management is responsible for establishing and maintaining adequate internal control over financial reporting, as such term is defined in Rule 13a-15(f) and 15d-15(f) under the Securities Exchange Act of 1934. Under the supervision and with the participation of the Company’s management, including our principal executive officer and principal financial officer, we conducted an evaluation of the effectiveness of our internal control over financial reporting based on the framework in Internal Control—Integrated Framework issued by the Committee of Sponsoring Organizations of the Treadway Commission. Based on our evaluation under the framework, our management concluded that our internal control over financial reporting was effective to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles as of December 31, 2008.

58

Table of Contents

The effectiveness of our internal control over financial reporting as of December 31, 2008 has been audited by KPMG LLP, an independent registered public accounting firm, as stated in their report, which is included below.

Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.

(b) Management’s Report on Internal Control Over Financial Reporting.

The Company’s management is responsible for establishing and maintaining adequate internal control over financial reporting, as such term is defined in Rule 13a(f) and 15d-15(f) under the Securities Exchange Act of 1934. Under the supervision and with the participation of the Company’s management, including our principal executive officer and principal financial officer, we conducted an evaluation of the effectiveness of our internal control over financial reporting based on the framework in Internal Control—Integrated Framework issued by the Committee of Sponsoring Organizations of the Treadway Commission. Based on our evaluation under the framework, our management concluded that our internal control over financial reporting was effective to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles as of December 31, 2007.

The effectiveness of our internal control over financial reporting as of December 31, 2007 has been audited by KPMG LLP, an independent registered public accounting firm, as stated in their report, which is included below.

Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.

56

Table of Contents

(b) Management’s Report on Internal Control Over Financial Reporting.

The Company’s management is responsible for establishing and maintaining adequate internal control over financial reporting, as such term is defined in Rule 13a(f) and 15d-15(f) under the Securities Exchange Act of 1934. Under the supervision and with the participation of the Company’s management, including our principal executive officer and principal financial officer, we conducted an evaluation of the effectiveness of our internal control over financial reporting based on the framework in Internal Control—Integrated Framework issued by the Committee of Sponsoring Organizations of the Treadway Commission. Based on our evaluation under the framework, our management concluded that our internal control over financial reporting was effective to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles as of December 31, 2006.

Our management’s assessment of the effectiveness of our internal control over financial reporting as of December 31, 2006 has been audited by KPMG LLP, an independent registered public accounting firm, as stated in their report, which is included below.

Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.

(b) Management’s Report on Internal Control Over Financial Reporting.

The Company’s management is responsible for establishing and maintaining adequate internal control over financial reporting, as such term is defined in Rule 13a(f) and 15d-15(f) under the Securities Exchange Act of 1934. Under the supervision and with the participation of the Company’s management, including our principal executive officer and principal financial officer, we conducted an evaluation of the effectiveness of our internal control over financial reporting based on the framework in Internal Control—Integrated Framework issued by the Committee of Sponsoring Organizations of the Treadway Commission. Based on our evaluation under the framework, our management concluded that our internal control over financial reporting was effective to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles as of December 31, 2005.

Our management’s assessment on the effectiveness of our internal control over financial reporting as of December 31, 2005 has been audited by KPMG LLP, an independent registered public accounting firm, as stated in their report, which is included below.

Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.

Management’s Report on Internal Control Over Financial Reporting.

The Company’s management is responsible for establishing and maintaining adequate internal control over financial reporting, as such term is defined in Rule 13a(f) and 15d-15(f) under the Securities Exchange Act of 1934. Under the supervision and with the participation of the Company’s management, including our principal executive officer and principal financial officer, we conducted an evaluation of the effectiveness of our internal control over financial reporting based on the framework in Internal Control – Integrated Framework issued by the Committee of Sponsoring Organizations of the Treadway Commission. Based on our evaluation under the framework, our management concluded that our internal control over financial reporting was effective to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles as of December 31, 2004.

Our management’s assessment on the effectiveness of our internal control over financial reporting as of December 31, 2004 has been audited by KPMG LLP, an independent registered public accounting firm, as stated in their report, which is included below.

Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.