A. It is not the responsibility of external and internal auditors to monitor the control environment. This is the responsibility of management.

B. Whereas management is responsible for establishing the proper control environment and designing an overall internal control structure, it is the responsibility of internal auditing to review the reliability and integrity of financial information and the means used to collect and report such information.

C. Although the board of directors has oversight responsibility, it is not the responsibility of the board of directors to design the controls.

D. It is management's responsibility to establish the proper control environment and to design an overall internal control structure.