Internal control is, to some degree, the responsibility of everyone in an organization and therefore should be an explicit or implicit part of everyone.
Virtually all employees produce information used in the internal control system or take other actions needed to effect control.
Also, all personnel should be responsible for communicating upward problems in operations, noncompliance with the code of conduct, or other policy violations or illegal actions.