The SEC takes the position that public companies must assess and calibrate internal accounting controls for the risk of cyber frauds.
Significant risks are inherent in the judgment calls that the new rules will demand, consulting firm says.
New Justice Department guidance on compliance highlights the need for a data-driven approach to compliance.
A decline in accounting fraud has freed up time for SEC staff to prioritize internal controls over financial statements.
