all of the following are internal control procedures except A: Sarbanes-Oxley reforms B: assignment of responsibilities C: internal and external audits D: adequate records