which of the following is not a principal of internal control

a. responsibilities should be clearly established

b. adequate records should be maintained

c. responsibilities for related transactions should be divided

d. assets should be insured and employees bonded

e. audits should always be conducted by employees internal to the organization