Which of the following is not a component of internal control systems?

A.  External audit

B. Risk assessment processes carried out by the client

C. The control environment

D. Monitoring controls