Federal statute that requires SEC registrants and their auditors to attest to the effectiveness of internal control over financial reporting.