5. Division of Responsibilities
a. Control is the principal means of preventing fraud.
1) Management is primarily responsible for establishing and maintaining control.
2) Internal auditors are primarily responsible for preventing fraud by examining and evaluating the adequacy and effectiveness of control