Management is responsible for establishing effective internal control.
The management is supposed to establish good controls.