Which choice is not a component of internal control?
monitoring
information and communication
control environment
risk mitigation