Requiring smaller companies to have their internal controls audited "may not be an efficient way of benefiting and protecting investors."
