1. What are the key considerations when evaluating the severity of a deficiency in a control that directly addresses a risk of material misstatement? 2. Does the Assistant Controller's failure to adequately review the Vendor Change Form represent a deficiency in the design or operating effectiveness of the control? 3. Is the failure in the vendor request change form control indicative of a material weakness in internal controls over financial reporting