Which of the following is NOT a component of an effective internal control environment in COSO Internal Control - Integrated Framework?

• A. The control environment.
• B. Risk abatement.
• C. Control activities.
• D. Information and communication.

Answer: (B)

The main idea is recognizing the structure of the COSO Internal Control - Integrated Framework. COSO defines five components: the control environment, risk assessment, control activities, information and communication, and monitoring. Among the options, the phrase about risk abatement does not correspond to one of these five components. Risk abatement describes reducing or mitigating risk, which is addressed within the framework through activities like risk assessment and control activities, but it is not listed as a standalone component. The other options—control environment, control activities, and information and communication—are indeed components of the framework, making risk abatement the correct choice for what is NOT a component.