The Securities and Exchange Commission recently voted to exempt many smaller public companies from the Sarbanes-Oxley requirement for auditor attestations of their internal controls over financial reporting, but many companies have been able to bypass those audits anyway.
Only a firm “actively swindling funds” would trigger an onsite visit, according to Peter Driscoll.