A condition in which internal controls do not reduce to a relatively low level the risk that material errors or fraud may occur and not be detected in a timely period by employees in the normal course of their duties.