3 Which of the following statements is true? a. The coso report on enterprise risk is in and is management narrow scope limited to financial controls. (Incorrect. The scope of the coso report on ERM incorporates all kinds of internal controls, not just financial controls, and provides an all-encompassing focus on the broader subject of enterprise risk management.) b. coso's internal control integrated framework report has been widely accepted as the authority on internal controls. (Correct. The internal control integrated framework is the accepted authority on internal controls and is incorporated into policies, rules, and regulations that are used to control business activities.) c. The Foreign Corrupt Practices Act had no impact on internal accounting control systems. (Incorrect. The Foreign Corrupt Practices Act specifically requires corporations to maintain good systems of internal accounting control.) d. It is easier to add controls to an already designed system than to include them during the initial design stage. (Incorrect. The opposite is true. It is easier to include internal controls at the initial design stage than after the system is already designed.)