SOX legislation requires companies to report on the effectiveness of their internal controls. The SEC administers SOX, and defines internal controls as follows. A process designed by, or under the supervision of, the registrant's principal executive and principal financial officers . . . to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles.

Why would Congress believe internal controls are such an important area to monitor and report on?