Executive summary
For a Controller or Internal Audit Director drinking their first cup of coffee, five facts: - 416 unique sub-$500M revenue public companies filed 10-K or 10-K/A disclosures with SOX-distressed language between 2025-12-01 and 2026-04-17. 63.5% are Smaller Reporting Companies and 44.5% are Emerging Growth Companies. This is not a Fortune 500 problem; this is a microcap-and-portco problem with a 416-company surface area visible from public filings alone. - 47.6% are incorporated in Delaware or Nevada, and 81.0% (337 of 416) have both a trading ticker and a published phone number — they are direct-contactable entities, not opaque shells. The subset of 52 non-large accelerated filers is the 404(b) auditor-attestation cohort where PCAOB scrutiny is highest and the cost of evidence failure is a publicly-disclosed material weakness. - AU-C 530.A12 tolerable-rate math forces a 3-person internal audit team at a 650-emp PE portco to run roughly 60 controls × 25 samples × 6 hours per sample ≈ 9,000 hours per year, against a staffed capacity of 5,800 hours — a 3,200-hour deficit that is currently closed with external consultants, missed deadlines, or undocumented shortcuts. - A 10-portco PE fund runs roughly 50,000 control tests per year across the portfolio, and the three available options are AuditBoard-upmarket tooling at $2M–$5M/year, Protiviti-style staff aug at roughly $60M/year at full AS 2201 rigor (which nobody actually pays), or per-entity continuous assurance at $20k/yr × 10 = $200k per fund — two orders of magnitude less than the $4.4 billion that Hg Capital paid for AuditBoard in May 2024. - PCAOB's 2024–2025 public Part II / disciplinary releases against Big 4 and mid-tier firms repeatedly cite stale or reperformance-deficient evidence — the standard has quietly moved from "evidence exists" to "evidence that the engagement team could reperform at inspection time." Continuous-capture evidence is now the direction of supervisory expectation, not a nice-to-have. What follows is the methodology, the 416-filing data, the sample-size math, the portfolio…