a deficiency, or a combination of deficiencies, in internal control over financial reporting that is less severe than a material weakness, yet important enough to merit the attention by those responsible for oversight of the company’s financial reporting