I was about to post on S-O myself. If he doesn’t get the maximum penalty, then S-O has no meaning.
Sarbanes meant a great deal - to the IT industry at least. Billions and billions of dollars complying with 404, for example - everything is discoverable, you know.