01 · Costs
Attestation raises audit effort and fees.
Cutoff and transition studies find large first-year fee increases. Costs decline with experience and after the risk-based AS5 reform, but remain proportionately heavier for smaller issuers.
Evidence lab · updated July 30, 2026
A research map of the costs, reporting benefits, capital-market effects, exemptions, and real consequences of independent audits of internal control over financial reporting.
This is a curated, reproducible review—not a claim of literally exhaustive coverage. Findings and the site's independent methods assessment are kept separate.
Evidence signal
Signal labels summarize the reviewed designs, not vote counts.
Executive evidence map
First-year costs and disproportionate small-firm burden are the clearest findings. Benefits are plausible and often observed, but harder to isolate because weak controls, auditor effort, firm size, and reporting risk move together.
01 · Costs
Cutoff and transition studies find large first-year fee increases. Costs decline with experience and after the risk-based AS5 reform, but remain proportionately heavier for smaller issuers.
02 · Assurance
Several studies link audited controls or remediation to better disclosure and reporting outcomes. Others find management reports can identify similar weakness rates or that integrated audits underperform on some measures.
03 · Markets
Weaknesses are associated with higher equity and debt costs, and remediation with improvement. These studies often cannot separate attestation from underlying firm risk.
04 · Real effects
Near the $75 million cutoff, firms appear to change investment, innovation, equity issuance, leverage, and float. The same sorting that reveals burden also complicates simple above/below comparisons.
Core tension
The mandate can improve monitoring and still be inefficient at the margin. Evidence of a benefit is not evidence that every covered firm receives benefits greater than its costs; evidence of high cost is not evidence that attestation has no value.
Searchable bibliography
Corpus-grounded assistant
The assistant is restricted to the 32 sources and editorial methods notes on this page. It cites source IDs such as , distinguishes reported findings from interpretation, and says when the evidence is insufficient.
Powered by Gemini 3.5 Flash. Answers are generated; verify important claims in the linked source cards.
Methodology and limitations
The review prioritizes direct empirical evidence and transparent source tracing. It also includes a narrow set of related studies when they illuminate mechanisms—such as control remediation, debt pricing, fraud risk, or bundled EGC exemptions.
Targeted searches of SEC and GAO reviews, publisher sites, Google Scholar-style web results, SSRN/NBER, author repositories, and backward/forward references. Search concepts combined “404(b),” “internal control audit,” “accelerated filer,” “$75 million,” “exemption,” “audit fee,” “restatement,” “fraud,” “cost of capital,” “liquidity,” “investment,” and “JOBS Act.”
U.S. empirical or synthesis work that directly estimates 404(b) costs or effects; studies of the 404(b) exemption or threshold; and selected mechanism papers using 404 disclosures. Bundled JOBS Act studies are marked “Context” and never treated as 404(b)-only.
For each source, the site separately records what changed, the comparison group, timing, controls, uncertainty, robustness checks, and threats. User-facing notes explain in plain language whether the design convincingly separates cause from correlation.
When responsive, the synthesis foregrounds Journal of Accounting Research, Journal of Accounting and Economics, then The Accounting Review. But a journal name is not proof: directness and research design can make a regulator study or another journal more informative for a specific question.
Every source drawer states whether the full text was reviewed, an official text was checked online, or only the bibliographic record, abstract, and cited syntheses were available. Private research copies are used for verification only and are never published by this site.
It does not claim exhaustive coverage of every working paper, dissertation, legal article, or non-U.S. internal-control regime. It does not convert all outcomes into a single dollar welfare estimate. It does not assume that an internal-control weakness, 404(a), the broader SOX law, the JOBS Act, and 404(b) are interchangeable treatments.
Coverage is strongest for archival U.S. evidence through 2025 and official analyses available by July 30, 2026. Residual gaps include post-2020 causal evidence on the revenue exemption, direct investor-confidence experiments, and clean estimates of fraud prevention.
Paywalled papers and their full text are never passed to site visitors or the Gemini chat. Private research copies may be used only to produce our own bibliographic summaries, methods analysis, plain-language credibility assessment, and policy synthesis. The public page provides citations, DOI or publisher links, and only limited compliant excerpts when needed; it does not reproduce articles.
Full text is linked only where a lawful public copy was identified. Each source discloses the review basis so a reader can distinguish full-text verification from abstract-level coverage, and each policy note states whether the study directly tests 404(b), studies a related mechanism, or evaluates a broader policy bundle.
Site editorial analysis is labeled as such on every paper card. Corrections or additions: contact Nicholas Hallman.