Don't want to split hairs here, but SOX was pre-GFC, so I'm not attributing it to only post-GFC. My first-hand experience discussing personal liability with a BoD lasted about 3 seconds. LOL.