A financial statement audit is designed to express an opinion on the financial statements, not on the entity's internal controls. However, obtaining an understanding of these controls remains a key part of every financial statement audit. As part of obtaining that understanding, auditors may identify control gaps or deficiencies. If these deficiencies are significant, the auditor is obligated to report them to company management.