On October 2, the U.S. Securities and Exchange Commission (SEC) announced the upcoming expiration of the exemption from section 404 of the Sarbanes-Oxley Act currently enjoyed by public companies with a public float below $75 million. Section 404 of SOX requires public companies and their independent auditors to report on the effectiveness of internal controls. The extension for small public companies is scheduled to expire beginning with the annual reports of companies with fiscal years ending on or after June 15, 2010. The exemption had been set to expire for fiscal years ending on or after December 15, 2009, but was extended due to the recent publication of a study by the SEC's Office of Economic Analysis regarding whether post-2007 reforms were having the intended effect of "facilitating more cost-effective internal controls evaluations and audits." The study found a "significant reduction" in compliance costs following the 2007 reforms.

Certification of effectiveness of internal control over financial reporting is also required in Canada under NI 52-109 Certification of Disclosure in Issuers' Annual and Interim Filings. In contrast to the U.S., however, NI 52-109 does not require auditor attestation and permits "venture issuers" to omit certain certifications relating to internal controls over financial reporting and disclosure controls and procedures.