A deficiency in internal control exists when the design or operation of a control does not allow management or employees,

a) Only in design
b) Only in operation
c) In both design and operation
d) Never exists