The Securities and Exchange Commission recently voted to exempt many smaller public companies from the Sarbanes-Oxley requirement for auditor attestations of their internal controls over financial reporting, but many companies have been able to bypass those audits anyway.
Small companies avoid internal controls attestations by taking on debt