As nearly everyone knows by now, one of the most significant provisions of Sarbanes-Oxley is “Management Assessment Of Internal Controls,” known to most firms as “SOX 404.”

Section 404 requires that annual reports be accompanied by a statement clarifying that company management is responsible for creating and maintaining adequate internal controls, and that management has assessed the the effectiveness of those controls.