Section 404 of The Sarbanes-Oxley Act of 2002 obliges companies to report only material weaknesses in internal controls over financial reporting, not significant deficiencies.
However, there’s a catch, and it can be found in the standard used by accounting firms to audit a company’s internal control over financial reporting, as promulgated by the Public Company Accounting Oversight Board.

