Compliance with Sarbanes-Oxley can be a painful process for newly public companies, and large public companies are having a rougher time of it than their smaller counterparts.