The Sarbanes-Oxley Act of 2002 (SOX) requires management and auditors to opine on the effectiveness of internal controls for many public companies. One intention of SOX is to improve the reliability of information public companies provide to the financial markets …