COSO has announced its intention to review its 2004 ERM Framework and has already started soliciting feedback.  Broadly panned by the Risk fraternity, I believe it can provide a valuable contribution to the GRC landscape. Although I expect critics from both sides (COSO & ISO 31000), here are my recommendations. Continue reading →