The SEC has published many other sources of useful guidance that can help smaller companies perform the management assessment of internal controls under Sarbanes-Oxley Section 404. You should start with the SEC's website at http://www.sec.gov/spotlight/soxcomp.htm. Other good sources are: