The Discovery and Reporting of Internal Control Deficiencies Prior to SOX-Mandated Audits