Section 404b of the 2002 Sarbanes Oxley Act (SOX) requires auditors to attest to the effectiveness of a client's internal control over financial reporting (ICFR). In this paper, we provide an overview of key regulatory events in the implementation of the 404 internal control audit. We discuss...