As defined by COSO, which of the following are considered to be part of an organization's control environment?
1. establishing control consciousness within the org
2. setting goals and objectives
3. assigning authority and responsbility
4. distributing a written code of conduct

D is the best answer. All actions are part of a company's control environment.