Source: Accounting Today: IRS Watch
The Securities and Exchange Commission recently voted to exempt many smaller public companies from the Sarbanes-Oxley requirement for auditor attestations of their internal controls over financial reporting, but many companies have been able to bypass those audits anyway.

Read More: Small companies avoid internal controls attestations by taking on debt