Regulation COSO ERM

The Committee of Sponsoring Organizations of the Treadway Commission (COSO) issued the Integrated Internal Control Framework to help businesses and other entities to assess and improve their internal control systems. Since then, this framework has been incorporated in the policies, rules and regulations, and it has been used by thousands of businesses to better control their processes and progress toward achieving their objectives.

The most critical challenges for administrations include determining the risk that the entity is prepared for and accepts. So, in 2004, enterprise risk management (ERM) was incorporated in the Integrated Internal Control Framework, in which there is a relationship between the OBJECTIVES that the organization aims to achieve, the COMPONENTS of risk management, and the LEVELS of the organization.

COSO ERM in a business allows it to: 

• Identify the events that may have an impact on the organization, preventing it from achieving its objectives.
• Assess the business' risks and manage them according to the risk accepted thereby.
• Integrate risk management in the business' strategic planning processes, internal control and daily operations.
• Have a risk portfolio as per overall risk level of the business and for each of its divisions and/or functions.