Which of the following is NOT a principle of internal control?

Responsibilities should be clearly established.

Audits should always be conducted by employees internal to the organization.

Adequate records should be maintained.

Assets should be insured and employees bond