. "This, I believe, is a powerful argument for applying internal-control requirements to smaller public companies." . . .