The Sarbanes-Oxley Act continues to change the financial reporting landscape for publicly held companies. Public firms and their auditors face a new mandate: Make sure internal controls exist to prevent or detect fraud. And beginning in 2004, they must report on how effective the company's internal controls really are. This will have a big impact on internal auditors' fees. More importantly, what must you do to meet the new requirements?