Many companies complying with the Sarbanes-Oxley Act (SOX) focus primarily on effective internal controls and reliable financial reporting. Addressing only these aspects, however, leaves most of the value on the table. By putting the spotlight on the broader definition of internal control, which...