While public companies must comply with provisions of the Sarbanes-Oxley Act, that's not the case for private companies. Financial Executives Research Foundation (FERF) looks at whether private companies are complying anyway - voluntarily.
Publicly held companies are now reporting on the effectiveness of their internal controls over financial reporting, as required by the Sarbanes-Oxley Act of 2002. They have expended considerable time and effort to document and test their internal controls, and have paid their auditors significant sums to test these controls. Some companies have had to disclose material weaknesses that must now be remediated.
See full Article.