Which of the following statements about internal control is incorrect, based on the 0030 framework? F a. Internal controls starts with a strong set of policies and procedures. r b. Risk assessment and control activities are two of the compoments of the C050 model. . F c. Internal control can be expected to provide only reasonable assurance that business objectives will be achieved. r d. Monitoring of a company's internal controls are accomplished with ongoing supervision and independent reviews