Some Observations about SOX 404(b) Control Process Audits