COSO Enterprise Risk Management (ERM) Framework (2017)
Information, Communication, and Reporting – COSO Enterprise Risk Management (ERM) Framework (2017)

COSO Enterprise Risk Management (ERM) Framework (2017) P19: Principle 19: Communicates Risk Information

Communication channels are used to carry enterprise risk management. Channels give internal and external stakeholders the risk information relevant to their decisions; communication between the board and management is critical and starts with clearly defined risk responsibilities (which people need which information, and by when they have to act), with methods such as board reporting, site visits and informal discussion; and communication methods (electronic messages, external and internal reporting, meetings, public events, social media, training) are chosen so information is received as intended and are periodically evaluated.

Maintained by Gerard BlokdykControl text last updated

Other controls in Information, Communication, and Reporting – COSO Enterprise Risk Management (ERM) Framework (2017)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.