Complying with Sarbanes-Oxley Section 404: A Guide for Small Publicly Held Companies