And Sarbox was put in place partly in response. I won't argue that 1.) stuff doesn't still happen and that 2.) Sarbox doesn't add quite a bit of compliance overhead, but outright financial fraud is probably reduced from ~2000 considerably.

Obviously 2008 brought many examples of risk not being properly accounted for but that's mostly something different.