The auditor is required to render an opinion on the system of internal controls (for public companies). Which of the following would result in an adverse opinion being issued by an auditor related to internal controls?

The control risk is assessed at a low level.

The tests of controls support the documented understanding of controls.

There is a material weakness in the design or operation of controls.

A confirmation request is not returned to the auditor in a prompt manner.