Section 404 of the Sarbanes-Oxley Act of 2002 requires that management of public companies take responsibility for establishing and maintaining the entity's internal control. Management is also required by Section 404 to publicly report on the operating effectiveness of those controls. Risk assessment for public company financial reporting, then, from management's perspective, is the assessment of the risks related to effective internal control relevant to the preparation of financial statements in conformity with.