The insurance industry has finally swallowed Sarbanes-Oxley. Four years after Congress imposed SOX on publicly traded companies, insurance commissioners last month approved a new auditing rule that does much the same for insurers—including privately held or mutual insurers, who until now have been exempt from SOX obligations.