COSO Has Published Integrated Frameworks for Both Internal Control and for Enterprise

Multiple Choice

COSO has published integrated frameworks for both internal control and for enterprise risk management. Which of the following statements about the frameworks is most true?

A) Once the enterprise risk management framework was published, the internal control framework became obsolete.
B) If a manager feels an element of one of the frameworks is unimportant, it can be omitted.
C) "Risk assessment" refers to similar processes in both frameworks.
D) A "risk response" in the ERM framework could be considered a "control activity" in the internal control framework.