As defined by COSO, the 'control environment' component of internal control refers to:
-
A
Only the information technology controls and logical access management policies
-
B
The set of standards, processes, and structures that provide the foundation for all other internal control components
-
C
The documentation of financial reporting procedures and audit trails
-
D
The risk assessment methodologies used to identify control gaps