Section 404 of the Sarbanes-Oxley Act requires publicly-held companies to include information about their internal controls for financial reporting in annual reports. This includes describing steps taken to comply with SOX, such as establishing an audit committee as part of the Board of Directors to oversee financial reporting and audits. The annual report should identify audit committee members and their responsibilities.