Activity
Perform separate evaluations
Monitor business operations ICS ERM
Description
Comment
"While ongoing monitoring procedures usually provide important feedback on the effectiveness of other enterprise risk management components, it may be useful to take a fresh look from time to time, focusing directly on enterprise risk management effectiveness. This also provides an opportunity to consider the continued effectiveness of the ongoing monitoring procedures."
COSO
Organisation
Responsible
Internal/External Audit
Input/Output
Input data
Monitoring plan
Risk strategy
Process documentation
Output data
Audit results