Due to the risk of unauthorized entry into a warehouse containing personal computers, locks are installed on all warehouse doors. A burglar is able to pick the lock on one of the doors and enter the warehouse. While inside, she unknowingly triggers an alarm system, alerting local law enforcement. Given the risk is "unauthorized entry," the alarm system would be considered: Select one: O a. A detective control O b. A corrective control O c. A preventive control Internal audit is determining whether all controls described as being in place in the organization are operating as intended. This process would be considered a part of which COSO component of internal control? Select one: O a. Control environment O b. Risk assessment O c. Control activities O d. Information and communication e. Monitoring