3. During an audit, auditors are required to report internal control deficiencies identified in the design, implementation, or operating effectiveness, to certain employees within an entity. Which one of the following should the auditor report to? 3. During an audit, auditors are required to report internal control deficiencies identified in the design, implementation, or operating effectiveness, to certain employees within an entity. Which one of the following should the auditor report to