Which choice is not a component of internal control?
control environment
monitoring
risk mitigation
information and communication