An auditor discovers that a client's internal control over cash disbursements is weak.Which audit response is most appropriate?