This excerpt taken from the HPQ 10-Q filed Sep 8, 2005.
We are subject to numerous risks in connection with Section 404 of the Sarbanes-Oxley Act.
We are evaluating our internal control over financial reporting and related systems in order to allow our management to report on, and our independent auditors to attest to, our internal control over financial reporting, as required by Section 404 of the Sarbanes-Oxley Act of 2002 ("Sarbanes-Oxley"). As a result, we are incurring additional expenses and a diversion of management's time. While we currently anticipate completion of testing and evaluation of our internal control over financial reporting with respect to the requirements of Section 404 of Sarbanes-Oxley in a timely fashion, we may not be able to accomplish this because the applicable requirements are complex and time-consuming. In addition, as a result of our evaluation of internal control over financial reporting and related systems, we or our auditors may identify one or more material weaknesses in our internal control over financial reporting.
Internal control over financial reporting may not prevent or detect misstatements because of its inherent limitations, including the possibility of human error, the circumvention or overriding of controls, or fraud. Therefore, even effective internal controls can provide only reasonable assurance with respect to the preparation and fair presentation of financial statements. Further, the effectiveness of internal controls in future periods is subject to the risk that controls may become inadequate
because of changes in conditions or because the degree of compliance with the policies or procedures may deteriorate.
If we fail to evaluate our internal control over financial reporting and related systems in compliance with the requirements of Section 404, if we or our auditors determine that we have material weakness in our internal controls, if we fail to maintain the adequacy of our internal controls (including any failure to implement required new or improved controls), or if we experience difficulties in their implementation, our business and results of operations could be harmed, we could fail to meet our reporting obligations, and there could be a material adverse effect on the price of our securities.