The Enron scandal in 2001 has had a great impact on many investors’ confidence. Pressured by investors and criticism, the United States Congress hastily passed the Sarbanes-Oxley Act (SOX) of 2002 into law. The most contentious aspect of SOX is Section 404 (SOX 404), which requires management and external auditors to report on the adequacy of the company's Internal Control over Financial Reporting (ICOFR). This is noted by companies as the most costly aspect of the legislation to implement since documenting and testing important financial manual and automated controls requires enormous effort (Chan et al. 2005).