Sarbanes Oxley

Read the article "Sarbanes-Oxley and Public Reporting on Internal Control: Hasty Reaction or Delayed Action'?". Do you agree with the authors that the COSO 1992 Framework and SOX 2002 Section 404 succeeded in changing the ways companies thought of internal controls over risk assessment? Why or why not?