Smaller and newer public companies have long been exempt from Section 404(b) of the Sarbanes-Oxley Act, which requires an outside auditor to attest to the effectiveness of a company’s internal control over financial reporting. In May 2026, the SEC proposed…