Here's the lowdown
An SEC proposal could remove the outside audit of internal controls for about 81% of public companies by count.
SEC Chair Paul Atkins says the companies still covered would represent about 94% to 95% of total public float, the market value of shares available to investors.
Critics say the exemption could reach companies that are too large, complex or important for investors to lose independent testing of financial-reporting controls.
The 81% number needs an asterisk
A safeguard built after Enron could disappear for most public companies by count.
The SEC proposal would redraw the lines that separate large accelerated filers from non-accelerated filers. One result: about 81% of public companies could be exempt from the auditor-attestation rule in Section 404(b) of the Sarbanes-Oxley Act.
That sounds like nearly the whole market. It is not.
Atkins says companies that remain subject to the audit would still represent about 94% to 95% of total public float. Public float is the market value of shares available for public trading.
So the proposal creates two very different pictures. Most public companies could fall outside the rule, while the biggest companies that make up most market value would remain inside it.
What the audit actually does
Section 404(b) is not a second audit of the financial statements. It is an outside opinion on the controls used to produce those statements.
Think about who can approve a journal entry, how revenue is recorded, how estimates are reviewed and whether one person can both create and hide a bad transaction. Management designs and tests those controls. The outside auditor checks management's work and gives an independent opinion.
That opinion does not promise that fraud or error is impossible. It gives investors another set of trained eyes on the system behind the numbers.
The requirement can also be expensive. Smaller companies may have fewer employees, less revenue and a thinner bench of finance specialists, yet still need formal documentation, testing and outside audit work.
Atkins argues that those costs can discourage companies from going public. His goal is to simplify a patchwork of filer categories and reduce the compliance load for smaller issuers.
The proposal reaches beyond tiny companies
The hard question is where "smaller" ends.
The SEC plan would extend scaled disclosures to issuers with less than $2 billion in public float. Critics say that threshold can include mature businesses and large subsidiaries with public debt, not just young companies with a few employees.
The plan also offers a five-year accommodation for newly public companies, regardless of size. The Center for Audit Quality's comment argues that a blanket five-year window is too broad for highly capitalized companies that arrive in public markets with complex operations and a large investor following.
That is the core disagreement. The SEC is using size and time as practical lines. Critics say those lines do not always match risk.
A company can have a smaller public float and still operate in many countries, make hard-to-check estimates or depend on systems that move millions of transactions. Investors face the reporting risk even when the company's shares fall below a threshold.
Cost savings can move risk instead of removing it
Dropping the attestation can lower outside-audit fees. It can also reduce the internal work needed to prepare for that audit.
But the work does not vanish from the business. Management still needs controls that keep the books reliable. Audit committees still need to understand where those controls are weak. Investors still need confidence in the financial statements.
Without the outside opinion, more of that confidence rests on management's own testing and the board's oversight. A company may save cash today while accepting a higher chance that a control problem stays hidden longer.
That trade can be reasonable for some issuers. The debate is whether the proposal chooses the right issuers or sweeps too many into the exemption.
A separate NYSE plan adds another five-year window
The SEC proposal is not the only move to loosen audit requirements.
The New York Stock Exchange has proposed letting newly listed companies take up to five years to establish an internal audit function. Internal auditors work inside the company and review controls, risk and governance. They are different from the outside auditors who issue the Section 404(b) opinion.
The Institute of Internal Auditors says five years is too long for a public company to operate without that ongoing review. The exchange may be trying to make its listing rules more competitive with Nasdaq, which does not have the same internal-audit requirement.
The two proposals touch different jobs, but they point in the same direction: fewer required checks during a company's early public years.
The final boundaries matter more than the headline
The SEC has not eliminated the rule. It has proposed a new boundary and is weighing public comments.
The 81% figure explains how many companies could leave the requirement. The 94% to 95% figure explains how much public-market value would remain covered. Neither number alone settles the question.
The real test is what sits between them: companies that are not market giants but may still be complex enough that investors benefit from an independent opinion on their controls.
If the proposal moves forward, audit committees will need to decide whether a legal exemption should also become a governance choice. Being allowed to skip an outside control audit is not the same as proving the audit has no value.
