As public company executives surely know by now, Sections 302 and 404 of SOX require public companies to establish, implement and evaluate their internal controls for purposes of financial statement reporting and operational integrity.
Outside auditors must attest to management’s assessment.
