Answer:
d. An internal auditing function.
Step-by-step explanation:
COSO is an acronym for Committee of Sponsoring Organizations, it was established by five private organizations comprising of the largest finance, auditing, and accounting oversight committees in 1985 in the United States of America.
Control activities constitute one of the five components of internal control described in the COSO model. Control activities do not encompass an internal auditing function. The control activities are the strategic approach or plans and internal controls used by managers to reduce the high risks. These control activities include performance reviews, information processing, physical controls etc.