A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting such that there is a reasonable possibility a material misstatement will not be prevented or detected in time. The internal auditor must evaluate and report this condition:

• If a material weakness is identified and not remediated, the external auditor is likely to issue an adverse opinion on internal controls. This signals to stakeholders that financial statements may not be reliable. Only after management corrects the weakness and the internal auditor verifies its remediation can an unqualified opinion (clean opinion) be issued.

• Example: A company lacks segregation of duties in its revenue cycle—sales staff can create, approve, and record transactions. The internal auditor finds revenue is overstated by $1.2 million due to fictitious sales. This is a material weakness in both control design and operation. The auditor reports it, and an adverse opinion is issued. Management responds by redesigning controls—separating duties and automating approval workflows. After retesting, the internal auditor finds the issue resolved and recommends upgrading the opinion to unqualified in the next audit cycle.

• Identifying material weaknesses and ensuring their remediation helps protect the integrity of financial reporting and restores stakeholder confidence.