How does the Sarbanes-Oxley Act (SOX) relate to internal controls? While SOX is applicable to large organizations, many small businesses cannot implement internal controls to the extent discussed in the textbook. How can small businesses ensure their books are correct and employees are not committing fraud? Participate in follow-up discussion by adding examples of how small businesses can implement internal controls.