Who is responsible for internal controls?

Management is responsible for ensuring that internal controls are established and functioning.
Management must create additional controls or altering existing controls as operating environments change.