The Sarbanes-Oxley Act of 2002 was passed by the United States Congress in order to protect consumers and the general public from companies that act maliciously or with less vigilance. The general requirements of SOX compliance are focused on ensuring that companies are vigilant and transparent when it comes to financial reporting and that there are more written and practiced rules in place to prevent fraud.
Section 404 of the act mandates that annual financial reports contain an Internal Control report specifying that management is responsible for an adequate internal control system, an evaluation of the system’s design and operating efficiency. External independent auditors must also attest to the accuracy of the company’s statement that internal controls are in place and operating effectively.