Which choice is not a component of internal control?
monitoring
risk mitigation
control environment
information and communication