Companies that previously certified “disclosure controls and procedures” under Section 302 of Sarbanes-Oxley may find themselves this year in the uncomfortable position of having internal control audits under Section 404 reveal material weaknesses–with regulators wondering why those flaws weren’t reported earlier.
