Choice "C" is correct. Integrity and ethical values are addressed in the Internal Environment component of the Committee on Sponsoring Organizations Enterprise Risk Management Integrated Framework. Other elements of internal environment include risk management philosophy, risk appetite, organizational structure, assignment of authority and responsibility, and human resources standards.
Choice "d" is incorrect. The information and communication component of the Committee on Sponsoring Organizations Enterprise Risk Management Integrated Framework includes information and communications standards, not ethical values.
Choice "b" is incorrect. The risk assessment component of the Committee on Sponsoring Organizations Enterprise Risk Management Integrated Framework includes the identification of inherent and residual risk, the evaluation of likelihood and impact of risk, and data sources. Ethical values are not a primary component of this area.
Choice "a" is incorrect. The control activities component of the Committee on Sponsoring Organizations Enterprise Risk Management Integrated Framework includes types of control activities, policies and procedures, and integration of control issues with risk responses. Ethical values are not a primary component of this area.