Identify two types of reports that may be issued on the internal control structure over the processing of transactions by service organizations and indicate by whom and for what purposes the reports are used.