SEC enforcement of internal controls