Enterprise Risk Management is a process, effected by

COSO argues that its ERM framework is applicable for small companies as well as mid-sized and large firms, as long as each component is present and functioning properly. Smaller organizations can benefit from having a structured, formal ERM process that can be expanded over time--to the extent that doing so makes sense for the organization. ................
................