Management should design and implement internal control based on the related cost and benefits.
Management should base its design and internal control implementation on related cost and benefits.
Management should ignore the related cost and benefits and design and implement however they please.