Discuss the penalties that will apply if a company is not compliant with the Sarbanes-Oxley Act. Additionally, be sure to cover the types of information that must be protected by internal controls and the role external auditors should play in compliance.