Internal control is a process: 

(a) Designed to provide reasonable assurance about the achievement of the entity’s objectives with regard to the reliability of financial reporting, effectiveness, and efficiency of operations, and compliance with applicable laws and regulations. 

(b) That is the responsibility of those charged with governance. 

(c) That is designed and implemented to address identified business risks that threaten the achievement of the entity’s objectives. 

(d) All of the above.