Which is the odd one out?

Control mechanisms are all those arrangements and procedures in place to ensure the business objectives may be met and they should exhibit certain defined attributes:

a. They should be clearly defined and understood by all users.

b. Mechanisms should be established to monitor the extent to which control is being applied in practice.

c. Controls should be reviewed annually.

d. Their use should be agreed by management and the staff who operate them.