The COSO framework is built on five interrelated components. Which of the following is NOT one of them?
A. control environment
B. risk assessment
C. control activities
D. InfoSec governance
Answer: D
Computer Science & Information Technology