Which of the following is the least accurate statement regarding concepts as defined by the COSO framework?

a. Ethical values, risk assessment and monitoring are part of a company's "control environment"

b. Everyone in an organization have some control duties or responsibilities.

c. Business objectives can be categorized into 3 groups-financial reporting, operational & compliance/regulatory.

d. Information and Communication are important components of internal control.