Remove 2004 Remove Accreditation Remove Mitigation Remove Vulnerability
article thumbnail

IRM, ERM, and GRC: Is There a Difference?

Reciprocity

As a result, in 2004, the Committee of Sponsoring Organizations (COSO) issued a second framework: Enterprise Risk Management -Integrated Framework , subsequently updated in 2017. You’ll think ahead, anticipating new risks down the road and your organization’s risk response: accept, avoid, transfer, mitigate.