Internal control is a system that is not:

a. designed to provide reasonable assurance about the achievement of the entity’s objectives with regard to reliability of financial reporting, effectiveness and efficiency of operations, and compliance with applicable laws and regulations.

b. the responsibility of those charged with governance.

c. designed and implemented to address identified business risks that threaten the achievement of the entity’s objectives.

d. designed and approved by the external auditors after consultation with management.