5. Components of enterprise risk management (ERM) are integrated with the management process. Which of the following correctly states four of the eight components of ERM according to the COSO's framework?
A. Event identification, risk assessment, control activities, and objective setting.
B. Internal environment, risk responses, monitoring, and risk minimization.
C. External environment, information and communication, monitoring, and event identification.
D. Objective setting, response to opportunities, risk assessment, and control activities.
Answer (A) is correct.
REQUIRED: The item identifying four components of ERM.
DISCUSSION: ERM ensures that (1) a process is established and (2) objectives align with the mission and the risk appetite. Event identification, risk assessment, control activities, and objective setting are components of ERM. Event identification relates to internal and external events affecting the organization. Risk assessment considers likelihood and impact (see the definitions of risk in The llA Glossary) as a basis for risk management. Control activities are policies and procedures to ensure the effectiveness of risk responses. Objective setting precedes event identification.
Answer (B) is incorrect. Risk assessment, not minimization is a component of ERM.
Answer (C) is incorrect. The internal, not external, environment is a component of ERM.
Answer (D) is incorrect. Response to opportunities is a capability of ERM.