Again, COSO is only a framework rather than a requirement. Compliance with COSO is not legally mandated. For those that want to improve their compliance and fortify their internal control structure, however, the following five core components (as well as the checklist below) can help your organization get started.
CONTROL ENVIRONMENT
RISK ASSESSMENT
CONTROL ACTIVITIES
INFORMATION AND
COMMUNICATION
MONITORING
"As we expand our use of ZenGRC, the business value is only going to increase, earning its keep as a strategic asset that's critical to our operations."
"ZenGRC was easy to use, it matched our model for how things ought to be linked & had all the compliance programs we needed. I didn’t find another solution that even came close."