SOX 404 includes three main provisions: (1) management units must construct, implement, and maintain effective Internal Control over Financial Reporting (ICOFR); (2) management units must propose the assessment report on the effectiveness of ICOFR; and (3) firms must hire accountants who will propose the assessment report on the effectiveness of ICOFR and who will also report this to firms.