An internal audit function has agreed to conduct an advisory consulting engagement related to evaluating the efficiency of a process. During this engagement, an internal auditor identifies a control weakness that could be material to the company. Since a consulting engagement is between two parties—the customer and the auditor—is there any obligation to disclose this weakness to senior management and the audit committee? What are the benefits and drawbacks of an internal auditor communicating such a weakness?