The overhaul in corporate accountability sparked by the Sarbanes-Oxley Act of 2002 marks the most dramatic and far-reaching reform affecting financial reporting in almost 70 years. When it comes to complying with the new rules on certifications and the issuance of management’s report on internal controls, Section 404 can be seen as an opportunity to broaden the compliance process to an enterprise-wide risk management perspective.