COBIT's Accountability Framework Can Enhance Internal Control by Assigning Responsibility

COBIT's accountability framework can enhance internal control by assigning responsibility and designating authority for various tasks related to information systems security. Which of the following groups is ultimately responsible for developing and maintaining a strong internal control system?

A) Board of directors.
B) Management.
C) External auditors.
D) Internal auditors.