cannot be left open and tolerable. What The auditor must define the people responsible and a target date to address the root cause and to contain its adverse impacts, otherwise it will continue to weaken the management system?