COSO ERM, Principle by Principle
COSO Enterprise Risk Management links risk to strategy and performance. It sets out five components and twenty principles that boards and management use to judge how well risk is governed and managed.
CAPA-21Governance and CultureIn progressCAPA-24PerformanceOverdueHow COSO ERM Is Organised in Arbor
COSO ERM loads with its components, ready to assign and assess.
- 01Governance and Culture
- 02Strategy and Objective-Setting
- 03Performance
- 04Review and Revision
- 05Information, Communication and Reporting
What Arbor Does with COSO ERM
- Five components and twenty principles loaded
- Maturity assessed principle by principle
- Risks linked to strategy and business objectives
- Works alongside your ISO 31000 risk process
No Clause Numbers to Memorise
Arbor AI suggests the COSO ERM requirements that apply as you work.
COSO ERM in Four Steps
Load
COSO ERM loads with its full structure, kept up to date by our team.
Set Scope
Decide what applies and record the reason.
Assess
Assign owners, score each requirement and link evidence.
Prove
Close gaps with corrective actions and report with confidence.
Do the Work Once for COSO ERM
Where controls overlap, shared evidence counts toward related frameworks, so nothing is done twice.
Frequently Asked Questions
Is COSO ERM Kept Up to Date?
Yes. Our team loads COSO ERM and updates it when the standard changes.
Can We Import Our Existing COSO ERM Assessment?
Yes. Use the Excel template and Arbor checks every row before it loads.
Can COSO ERM Share Evidence with Other Frameworks?
Yes. Evidence is uploaded once and linked to every requirement it supports.
See COSO ERM in Arbor GRC
Bring your current risk register. We can import it from Excel during the demo, so you see your own risks in Arbor, not ours.