| Regulatory basis | Sarbanes-Oxley Act 2002, Section 302; SEC Rule 13a-14 | Sarbanes-Oxley Act 2002, Section 404; SEC Rules 13a-15 and 15d-15 | Canadian Securities Administrators National Instrument 52-109 (effective 2008) |
|---|
| Issuer scope | All SEC-registered issuers filing 10-K, 10-Q (US domestic) or 20-F, 6-K (foreign private issuers) | Same as 302, with reduced/phased obligations for emerging growth companies and smaller reporting companies | All reporting issuers in any Canadian jurisdiction, with reduced (modified) obligations for venture issuers |
|---|
| Core requirement | CEO/CFO personal certification of report accuracy, internal-control existence, and disclosure-control effectiveness | Management assessment of ICFR effectiveness (404(a)) + auditor attestation of management's assessment (404(b)) | Tiered: Form 52-109F1 (annual full certificate) and Form 52-109F2 (interim certificate) by CEO and CFO |
|---|
| Frequency | Each annual and quarterly report filed | Annual | Annual (F1) and interim (F2); modified-form options for venture issuers and IPO year |
|---|
| Framework reference | Disclosure controls and procedures (DC&P) | Recognised internal-control framework required — COSO 2013 is the dominant US framework | Suitable control framework required — COSO 2013, COCO, or Turnbull guidance all recognised |
|---|
| Material weakness disclosure | Disclosure of material weaknesses in internal control | Disclosure of identified material weaknesses with severity assessment | Disclosure of material weaknesses including weaknesses related to ICFR design and operating effectiveness |
|---|
| External auditor attestation | No separate auditor attestation | Required for accelerated and large accelerated filers; not required for non-accelerated filers, EGCs, or SRCs (under current SEC rules) | No mandatory external auditor attestation — separates Canadian regime from US-style auditor attestation requirement |
|---|
| MJDS / 40-F implication | Foreign private issuers filing 20-F: yes; Canadian MJDS issuers filing 40-F: yes (Section 302 applies) | MJDS 40-F filers: yes — Section 404 applies including auditor attestation if accelerated | Applies to Canadian reporting issuers regardless of US filing status; MJDS issuers comply with both regimes |
|---|
| Certification language | Prescribed statutory language; deviation has been treated as material | Management's report language flexible; framework reference required | Prescribed form language; jurisdictional variations limited |
|---|
| Penalties | Up to USD 1 million / 10 years for knowing certification of misleading report; USD 5 million / 20 years for willful certification | Same statutory framework via Section 906 | Regulatory enforcement under Canadian securities legislation; provincial securities commission proceedings |
|---|
| Common interpretation source | PCAOB AS 5; SEC interpretive releases | PCAOB AS 2201 (auditor attestation); SEC interpretive guidance for management | CSA Notice 52-313, 52-324, and successor staff notices providing implementation guidance |
|---|