As we hear or read about what’s good and bad with Sarbanes-Oxley Section 404, there seem to be almost as many viewpoints as observers. Virtually everyone believes he or she has the right “fix” for what’s wrong with the well-intentioned law, and its requirements that management assess and report on the company’s internal control system, and that the external auditor audit the system and management’s assessment of it.
