If you have ever been involved in Sarbanes Oxley, especially when it first started out in the mid 2000’s you will be very familiar with COSO.

← Back to Blog

If you have ever been involved in Sarbanes Oxley, especially when it first started out in the mid 2000’s you will be very familiar with COSO. The framework for the design of risk risk assessment, controls, mitigation and monitoring lead from organisational design and strategy.

This article forced me to dust of materials from as far back as 2004 on risk management and COSO. Which are as pertinent today, as they were then. COSO is a good foundational framework for risk management and has direct application to Cyber. If it was, is, good enough for SoX then its good enough for cyber risk.
(https://lnkd.in/eiKxt3K)

However the challenge is not the framework. We require a fundamental change in mentality focusing on risk management, for it to be successful.

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6646347216942350336