Management is ultimately responsible for maintaining effective internal controls. The board of directors should oversee the design and implementation of the system, while management is responsible for ensuring that controls are in place and operating effectively. Additionally, internal auditors may be employed to provide an independent evaluation of internal control systems.