Answer:
D
Step-by-step explanation:
The internal control structure of a company is made up of the policies and procedures established to provide reasonable assurance that particular objectives will be achieved.
The system or structure consists of the following:
- Controlling the environment
- Risk assessment
- Control activities
- Information and communication
- Monitoring
Rationalization is not one of them.