8) Which one of the following is an element of internal controls:

Select one:

a.Risk assessment

b.Limited communication

c.It is not a regular practice

d.It does not need management support.