The Committee of Sponsoring Organizations of the Treadway Commission (COSO) has issued three new documents addressing developments in internal control over generative artificial intelligence (GenAI), corporate governance and enterprise risk management. The guidance is intended to help organizations respond to emerging risks related to GenAI, evolving governance expectations, and to help strengthen enterprise risk management (ERM) programs.
Achieving Effective Internal Control Over Generative AI (GenAI) provides a practical roadmap to apply the 17 principles from the Internal Control–Integrated Framework issued by COSO in 2013 to GenAI. It responds to rapid adoption of GenAI and the emerging AI-specific risks that could undermine an organization’s operations, reporting or compliance if left unaddressed. This publication builds on COSO’s publication from September 2021 on artificial intelligence, Enterprise Risk Management—Realize the Full Potential of Artificial Intelligence: Applying the COSO Framework and Principles to Help Implement and Scale Artificial Intelligence.
Corporate Governance: Guiding Principles for Board Oversight provides 12 board-level guiding principles to assist boards in assessing whether their governance model remains fit for purpose. This guidance comes as organizations confront more complex risk environments, accelerating change and heightened stakeholder scrutiny equipping boards to enhance oversight and long-term value creation. This publication is grounded in COSO’s work in internal control, risk management and oversight.
From Guidance to Action: Exploring Practical Enterprise Risk Management provides practical, experience-based guidance on how organizations apply Enterprise Risk Management—Integrating with Strategy and Performance issued by COSO in 2017 in practice. It aims to close the gap between risk documentation and real-world decision impact, helping organizations use ERM to improve performance, resilience and governance.
