Control Environment, Risk Assessment, Control Activities, Information and Communication and Monitoring are all components of:

The five listed items—Control Environment, Risk Assessment, Control Activities, Information and Communication, and Monitoring—are the five interrelated components of the Internal Control-Integrated Framework. This framework was developed by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). It provides a widely accepted model for organizations to design, implement, conduct, and assess the effectiveness of their internal control systems. The framework is used globally by management to enhance control over financial reporting and other organizational objectives.

A. State Insurance Statutes are laws and regulations governing the insurance industry within a specific state, not a universal internal control framework.

C. Trade Organizations/Associations represent specific industries and may offer guidance, but they are not the originators of this foundational internal control model.

D. Accounting Firms and Business Partners utilize and audit against frameworks like COSO; they did not create the framework itself.

1. Committee of Sponsoring Organizations of the Treadway Commission (COSO). (2013). Internal Control — Integrated Framework, Executive Summary. Page 4. Retrieved from https://www.coso.org/site-pages/internal-control.aspx (The document explicitly lists and defines the five components on this page).

2. Rae, K., & Subramaniam, N. (2008). Quality of internal control procedures: Antecedents and moderating effect on organisational justice and employee fraud. Managerial Auditing Journal, 23(2), 104-124. (This academic article discusses the application and components of the COSO framework, identifying the five components as its core structure). DOI: https://doi.org/10.1108/02686900810839765

3. Whittington, O. R., & Pany, K. (2019). Principles of Auditing & Other Assurance Services (21st ed.). McGraw-Hill Education. Chapter 6, "Internal Control," extensively details the five components of the COSO framework as the basis for understanding and evaluating an entity's internal controls.