Who holds primary responsibility for establishing internal controls?

Responsibility for Internal Controls:

Managementholds the primary responsibility for establishing, implementing, and maintaining an organization’s internal control system.

This responsibility is outlined in frameworks such as COSO’sInternal Control - Integrated Frameworkand the GAO’sGreen Book.

Roles of Other Parties:

A. Accountants: While accountants may assist in designing or assessing controls, they are not primarily responsible.

B. Internal auditors: Their role is to evaluate the effectiveness of controls, not establish them.

D. Audit committee: Provides oversight but does not implement or design controls.