Nicholas J. Hallman

Evidence lab · updated July 30, 2026

What do we know about SOX 404(b)?

A research map of the costs, reporting benefits, capital-market effects, exemptions, and real consequences of independent audits of internal control over financial reporting.

This is a curated, reproducible review—not a claim of literally exhaustive coverage. Findings and the site's independent methods assessment are kept separate.

Evidence signal

Cost increase at first compliance Consistent
Smaller-firm burden Consistent
Better control disclosure Mixed-positive
Fewer misstatements / fraud Suggestive
Lower cost of capital Limited
Investment and financing distortions Credible evidence

Signal labels summarize the reviewed designs, not vote counts.

Executive evidence map

The evidence is balanced, but not symmetrical.

First-year costs and disproportionate small-firm burden are the clearest findings. Benefits are plausible and often observed, but harder to isolate because weak controls, auditor effort, firm size, and reporting risk move together.

01 · Costs

Attestation raises audit effort and fees.

Cutoff and transition studies find large first-year fee increases. Costs decline with experience and after the risk-based AS5 reform, but remain proportionately heavier for smaller issuers.

02 · Assurance

Auditor involvement changes what gets found and reported.

Several studies link audited controls or remediation to better disclosure and reporting outcomes. Others find management reports can identify similar weakness rates or that integrated audits underperform on some measures.

03 · Markets

Investors and lenders price control quality, but 404(b)'s increment is uncertain.

Weaknesses are associated with higher equity and debt costs, and remediation with improvement. These studies often cannot separate attestation from underlying firm risk.

04 · Real effects

Bright-line exemptions alter corporate choices.

Near the $75 million cutoff, firms appear to change investment, innovation, equity issuance, leverage, and float. The same sorting that reveals burden also complicates simple above/below comparisons.

Core tension

The mandate can improve monitoring and still be inefficient at the margin. Evidence of a benefit is not evidence that every covered firm receives benefits greater than its costs; evidence of high cost is not evidence that attestation has no value.

Searchable bibliography

Read the studies—and their caveats.

32 sources · Cards foreground JAR, JAE, and TAR when relevant, but venue never substitutes for research design.

Corpus-grounded assistant

Ask the literature, not the open web.

The assistant is restricted to the 32 sources and editorial methods notes on this page. It cites source IDs such as , distinguishes reported findings from interpretation, and says when the evidence is insufficient.

Powered by Gemini 3.5 Flash. Answers are generated; verify important claims in the linked source cards.

SOX 404(b) research assistant
Assistant

Ask about costs, benefits, audit quality, market effects, exemptions, thresholds, or the strength of the evidence. I will answer only from the reviewed corpus.

Methodology and limitations

How this evidence set was built.

The review prioritizes direct empirical evidence and transparent source tracing. It also includes a narrow set of related studies when they illuminate mechanisms—such as control remediation, debt pricing, fraud risk, or bundled EGC exemptions.

01

Search

Targeted searches of SEC and GAO reviews, publisher sites, Google Scholar-style web results, SSRN/NBER, author repositories, and backward/forward references. Search concepts combined “404(b),” “internal control audit,” “accelerated filer,” “$75 million,” “exemption,” “audit fee,” “restatement,” “fraud,” “cost of capital,” “liquidity,” “investment,” and “JOBS Act.”

02

Include

U.S. empirical or synthesis work that directly estimates 404(b) costs or effects; studies of the 404(b) exemption or threshold; and selected mechanism papers using 404 disclosures. Bundled JOBS Act studies are marked “Context” and never treated as 404(b)-only.

03

Assess

For each source, the site separately records what changed, the comparison group, timing, controls, uncertainty, robustness checks, and threats. User-facing notes explain in plain language whether the design convincingly separates cause from correlation.

04

Weight

When responsive, the synthesis foregrounds Journal of Accounting Research, Journal of Accounting and Economics, then The Accounting Review. But a journal name is not proof: directness and research design can make a regulator study or another journal more informative for a specific question.

05

Verify provenance

Every source drawer states whether the full text was reviewed, an official text was checked online, or only the bibliographic record, abstract, and cited syntheses were available. Private research copies are used for verification only and are never published by this site.

What this review does not claim

It does not claim exhaustive coverage of every working paper, dissertation, legal article, or non-U.S. internal-control regime. It does not convert all outcomes into a single dollar welfare estimate. It does not assume that an internal-control weakness, 404(a), the broader SOX law, the JOBS Act, and 404(b) are interchangeable treatments.

Coverage is strongest for archival U.S. evidence through 2025 and official analyses available by July 30, 2026. Residual gaps include post-2020 causal evidence on the revenue exemption, direct investor-confidence experiments, and clean estimates of fraud prevention.

Copyright and corpus policy

Paywalled papers and their full text are never passed to site visitors or the Gemini chat. Private research copies may be used only to produce our own bibliographic summaries, methods analysis, plain-language credibility assessment, and policy synthesis. The public page provides citations, DOI or publisher links, and only limited compliant excerpts when needed; it does not reproduce articles.

Full text is linked only where a lawful public copy was identified. Each source discloses the review basis so a reader can distinguish full-text verification from abstract-level coverage, and each policy note states whether the study directly tests 404(b), studies a related mechanism, or evaluates a broader policy bundle.

Site editorial analysis is labeled as such on every paper card. Corrections or additions: contact Nicholas Hallman.