What is management's responsibility related to internal control over financial reporting? What is the external auditor's responsibility over internal control over financial reporting? Explain the differences between a control deficiency, a significant control deficiency, and a material deficiency in internal controls and possible effects on the audit engagement.