Which of the following is not included in a vulnerability chart?

a. Explanations of the fraud triangle in relation to suspects of fraud.
b. Breakdowns in key internal controls that may have created fraud opportunities.
c. Internal controls that a company plans to institute in the future.
d. Theft investigation methods.