Which choice is not a component of internal control?
information and communication
risk mitigation
monitoring
control environment