Which of the following controls is not likely to be an entity-level control?
a. All employees must receive ongoing training to ensure they maintain their competence.
b. All cash disbursement transactions must be approved before they are paid.
c. All employees must comply with the Code of Ethics and Business Conduct.
d. An organizationwide risk assessment is conducted annually.