D is corrent. The control environment, control activities, monitoring, risk assessment, and information/communications are the components of internal control, but not inherent risk. A is incorrect because control activities is a component of internal control. B is incorrect because monitoring is a component of internal control. C is incorrect because the control environment is a component of internal control.
|