Based on COSO 2013, which of the following statements is not correct?
a. Employees at any level of an organization play a role in internal control.
b. Internal controls can provide reasonable assurance only.
c. Internal control is a process consisting of ongoing tasks and activities.
d. The responsibility of monitoring the effectiveness of internal controls belongs to the internal audit group.