Which of the following matters would an auditor most likely consider to be a significant deficiency in internal control to be communicated to management and tho...