Under COSO, which of the following is considered an element of risk assessment? control environment, risk assessment, information and communication, control activities, and monitoring activities. confirmation, risk assessment, data processing, control activities, and monitoring activities. transaction verification, monitoring activities, risk assessment, control activities, and control environment. control environment, information and communication, monitoring activities, confirmation, and implementation