The discovery and reporting of internal control deficiencies prior to SOX-mandated audits