According to the Committee of Sponsoring Organizations (COSO) of the Treadway Commission, which of the following components of enterprise risk management addresses an entity's assignment of authority and responsibility?

a. Monitoring.

b. Information and communication.

c. Internal environment.

d. Control activities.

【答案解析】C

Explanation

Choice "c" is correct. The internal environment component of the enterprise risk management (ERM) framework includes foundational elements such as organizational structure, assignment of authority and responsibility, integrity and ethical values, risk management philosophy, commitment to competence and human resource standards, and similar issues that influence the tone of the organization.

Choice "d" is incorrect. The control activities component of the ERM framework includes key elements that relate to the policies and procedures that ensure appropriate responses to identified risks, not to the assignment of authority and responsibility.

Choice "b" is incorrect. The information and communication component of the ERM framework includes key elements that relate to the identification, capture and communication of information, not to the assignment of authority and responsibility.

Choice "a" is incorrect. The monitoring component of the enterprise risk management framework includes key elements that relate to the ongoing management activities or separate evaluations of the ERM approach adopted by the entity, not to the assignment of authority and responsibility.