When considering internal control, an auditor should be aware of the concept of reasonable assurance, which recognizes that:

(A) Internal control may be ineffective due to mistakes in judgment and personal carelessness.

(B) Adequate safeguards over access to assets and records should permit an entity to maintain proper accountability.

(C) Establishing and maintaining internal control is an important responsibility of management.

(D) The cost of an entity’s internal control should not exceed the benefits expected to be derived.