Which of these is NOT one of the five components of internal control under the COSO framework?
- A Control environment
- B Risk mitigation
- C Monitoring activities
- D Information and communication
Answer
Risk mitigation
The five components are control environment, risk assessment, control activities, information and communication, and monitoring. Risk mitigation is not one of them.





