A section of the Sarbanes-Oxley Act that requires management and external auditors to report on the adequacy of a company's internal control over financial reporting.