the company and the auditor have concluded that the internal control failure is not severe enough to be a material weakness but indicates a significant deficiency in internal control, what are the next steps for auditors have in terms of communicating the results? Compare and contrast with the case of material weakness.