Which of the following best describes how risk and control selfassessments (RCSA) can be used to manage fraud risk for Basel II?

a. An RCSA can be used to gather business environment and internal control factors that relate to fraud risks.

b. An RCSA should be used to collect fraud-related loss events.

c. RCSAs are designed primarily to provide estimates of capital for fraud risk exposures.

d. RCSAs are generally not designed to consider fraud risk.

e. RCSAs only consider internal fraud risks and not external fraud risks.