Control deficiency

A control that does not operate as designed, or a design that would not catch the error it targets. Deficiencies are graded by the size of the misstatement they could allow.