A material weakness in internal control over compliance arises when At a minimum, a deficiency is important enough to merit attention by those charged with governance. A reasonable possibility exists that material noncompliance will not be prevented or timely detected and corrected. The design or operation of a control does not allow management or employees to detect noncompliance in the normal course of their duties. A risk of material noncompliance exists prior to the audit.