Audit Watchdog Clarifies SOX 404 Requirements