Which of the following would NOT be considered a control deficiency in internal controls?