Which of the following elements of the Committee of Sponsoring Organizations provides assessment capabilities and uncovers vulnerabilities?
a. Risk assessment
b. Information and communications
c. Control activities
d. Ongoing monitoring