1. According to CoSO, which of the following components of the enterprise risk management addresses an entity's integrity and ethical values? A. Information and communication B. Internal environment. C. Risk assessment. D. Control activities. 2. When considering internal control, an auditor should be aware of reasonable assurance, which recognizes that A. Internal control may be ineffective due to mistakes in judgment and personal carelessness B. Adequate safeguards over access to assets and records should permit an entity to maintain proper accountability. C. Establishing and maintaining internal control is an important responsibility of management. D. The cost of an entity's internal control should not exceed the benefits expected to be derived 3. Review of the audit log is an example of which of the following types of security control? A. Governance. B. Detective C. Preventive. D. Corrective. 4. A manufacturing firm identified that it would have difficulty sourcing raw materials it decided to relocate its production facilities. According to Coso, this decision represents which of the following response to the risk? A. Risk reduction. B. Prospect theory. C. Risk sharing. D. Risk acceptance. 5. Which of the following items is one of the eight components of Coso's enterprise risk management framework? A. Operations B. Reporting Monitoring