Risk-Adjusting an Internal Audit-Program

THE COSO 2004 framework for enterprise risk management ¹ has since become the de facto standard for the spectrum of activities associated with the identification, assessment, management, and monitoring of risks across an enterprise. It builds on principles laid out in its earlier, 1992 publication² and reflects the same foundationa…