The report on an attestation engagement should disclose deficiencies in internal control , including internal control over compliance with laws and regulations , that are material to the subject matter or assertion .
The internal control methods are all sound .