Which choice is not a component of internal control?
monitoring
information and communication
risk mitigation
control environment