Section 404 of the Sarbanes-Oxley Act (SOX) requires every company to report on the effectiveness of internal controls over financial reporting. Section 404 has arguably been the most controversial provision of SOX, with many registrants complaining that the high cost of compliance outweighs its...