What does it mean to have a "material weakness in internal control"? How does the author distinguish between a significant deficiency in internal control and a material weakness in internal control? How does the auditor use the knowledge that there is a weakness in internal control as a basis to design direct tests of account balances?