ISO 31K and COSO ERM are the two competing risk management frameworks?  ISO 31K is the national standard for many countries.  However, COSO ERM is the de facto risk standard for many global and publicly listed companies.

We have used both.  There are differences.  However, the similarities outweigh the differences.  And, the critical question is:

So, can ISO 31000 and COSO ERM work together?

Yes. The COSO definition of control supports and reinforces ISO 9001:2015 control requirements, specifically both frameworks are: Continue reading →