Answer:
D
Explanation:
The internal control structure of a company is made up of the policies and procedures established to provide reasonable assurance that particular objectives will be achieved.
The system or structure consists of the following:
Rationalization is not one of them.