I thought they would have come with some recommendations...

I thought they would have come with some recommendations that actually reduce the burden -- maybe, you'll only have to, say, audit a third of the controls in any given year. Or maybe they would have come with some clarity on what are effective controls, a problem for all-sized companies.