Which one of the following statements about internal controls is correct?

a.

Internal controls ensure the company maintains profitability

b.

Internal controls have to be understood, even if a totally substantive approach is adopted

c.

Internal controls comprise a key component of the inherent risk assessment

d.

Internal controls are limited to only a few elements of an organization