Complying with Sarbanes-Oxley Section 404