Organizations now have years of experience complying with the Sarbanes-Oxley Section 404. Because of this, it is a good time to reflect on lessons learned. This questionnaire focuses on how to improve the compliance process, such as deploying a top-down approach and implementing a risk-based approach.