At long last, guidance from COSO—that is, The Committee of Sponsoring Organizations of The Treadway Commission—on how small companies can assess and improve their internal control over financial reporting is available. Now comes the hard part: putting that guidance to work so that compliance with Sarbanes-Oxley doesn’t overwhelm non-accelerated filers next year.