The COSO enterprise risk management framework identifies five core components that define how a company should approach creating its ERM practices. Governance and Culture Governance sets a company ...