the deficiencies identified are of sufficient importance to merit management’s attention. In these situations, the deficiencies should be communicated to management, if they were not previously communicated by the audit team, internal auditors, or others. This communication is not required to be in writing, but should be documented.