article thumbnail

IRM, ERM, and GRC: Is There a Difference?

Reciprocity

Not long ago, risk managers concerned themselves mainly with hazards such as fires and floods; or in the financial sector, loan defaults (credit risk). As a result, in 2004, the Committee of Sponsoring Organizations (COSO) issued a second framework: Enterprise Risk Management -Integrated Framework , subsequently updated in 2017.