As audit regulators now begin considering feedback to their proposed rewrite of rules governing audits of internal control over financial reporting, they are confronted with the ongoing tension between rules and principles—to give more or less guidance and to outline more or fewer prescriptive thresholds.



