Then SEC reviews reports every three years. "Section 408 of the Sarbanes-Oxley Act requires the SEC to review companies who issue Exchange Act reports at least once every three years."