As per SA 240, the responsibility for the prevention and detection of fraud and error rests with the management through the implementation of an adequate system of internal control.