The Committee of Sponsoring Organizations (COSO) establishes frameworks and criteria that companies and their auditors use to establish internal controls.
These criteria are considered some of the standards for enterprise risk management (ERM) practices.