I think the answer is in your link: "The legislation does not affect the SOX 404(a) requirement. Companies with public float of less than $75 million must continue to comply with SOX 404(a), which requires management’s assessment of internal controls over financial reporting."