1. In the three lines of defense model, the board of directors is accountable for the selection, development, and evaluation of the system of internal control. True or false?
2. Which statement is false?

A. The COSO internal control framework does not define responsibilities for duties.

B. Organizations use the components and principles of the three lines of defense model to implement effective controls and to mitigate risks.

C. An organization may decide to fully accept some of its risks.

D. The three lines of defense addresses how specific duties related to risk and control could be assigned and coordinated within an organization, regardless of its size or complexity.

E. Designing and implementing effective internal control can mitigate risk.

F. All of the statements above are true.