Clarify the incorrect statements: The first statement is incorrect because internal control components apply to financial reporting, operations, and compliance, not just financial reporting. The second statement is incorrect because the five components do not need to be implemented sequentially; they work together as an integrated system. The fourth statement is incorrect because the five components listed (planning, organizing, leading, controlling, and evaluating) are not part of the COSO framework; they are management functions.