Which of the following is not a component of an entity's internal control?

3. Control Risk

Control Risk is not a component of internal control.

3) Control Risk

Yes "Risk assessment process" but not "Control Risk".

3 is the correct answer

control risk 

Following are Five Component of Entity Internal Control:

1-Control Environment

2-Risk Assessment

3-Control Activities

4-Information and Communication

5-Monitoring 

So Control Risk in the question  is wrong interpretation

Answer (3) Control Risk

option3

the fourth answer