Achieving Effective Internal Control Over Generative AI COSO Releases Practical Roadmap for Managing Generative AI Risks and Controls New publication translates COSO’s Internal Control–Integrated Framework into practical, audit‑ready guidance for governing GenAI The Committee of Sponsoring Organizations of the Treadway Commission (COSO), today released a new publication, Achieving Effective Internal Control Over Generative AI (GenAI) , offering organizations a practical, COSO‑aligned approach to managing the risks and opportunities introduced by rapidly advancing generative AI technologies. Generative AI is moving into boardrooms and day‑to‑day operations far faster than traditional governance models anticipated. Organizations are already using AI‑enabled tools to automate reconciliations, accelerate analysis, and support decision‑making at a scale that compresses timelines and reshapes workflows. Such rapid adoption brings a new class of risks — from heightened cyber exposure and prompt‑based manipulation to opaque reasoning, model drift, and frequent configuration changes — that can jeopardize the integrity of operations, reporting, and compliance if not addressed with robust internal controls. Publication Press Release

Board of Directors The COSO Board is made up of representatives from each of the five sponsoring organizations, plus a chair who is elected by the five sponsoring organizations' board representatives. COSO Board Lucia Wind More Info COSO Board Chair Jennifer Burns More Info AICPA Represent ative Benito Ybarra More Info IIA Representative Douglas F. Prawitt More Info COSO Lead Director Jason Pikoos More Info FEI Represent ative Larry R. White More Info IMA Represent ative COSO Fellow Crisha Carlos More Info

Achieving Effective Internal Control Over Robotic Process Automation Integrating RPA Governance with the COSO Internal Control Integrated Framework (ICIF) The Committee of Sponsoring Organizations of the Treadway Commission (COSO ) today released a new publication that addresses critical governance challenges in the rapidly growing field of Robotic Process Automation (RPA). As RPA continues to reshape organizations by automating repetitive, rules-based tasks, this publication provides essential guidance for integrating RPA governance requirements with the COSO Internal Control Integrated Framework (ICIF). ..see more Press Release RPA with ICIF

COSO - Altdata Alternative Data: The COSO Perspective (2024/03/27) NEW YORK, March 27, 2024 – A new publication released today by the Committee of Sponsoring Organizations of the Treadway Commission (COSO) entitled Alternative Data: The COSO Perspective, explores how COSO’s Enterprise Risk Management (ERM) Framework can be applied to the challenge and opportunity of the growing proliferation of alternative data (“altdata”). See More

Governance Other Guidance Documents Corporate Governance: Guiding Principles for Board Oversight (2026) See More Improving Organizational Performance and Governance (2014) See More Enhancing Board Oversight (2012) See More

LATEST UPDATES: COSO Announces Search for New Board Chair See more > COSO was organized in 1985 to sponsor the National Commission on Fraudulent Financial Reporting , an independent private-sector initiative that studied the causal factors that can lead to fraudulent financial reporting. It also developed recommendations for public companies and their independent auditors, for the SEC and other regulators, and for educational institutions. The National Commission was sponsored jointly by five major professional associations headquartered in the United States: the American Accounting Association (AAA) , the American Institute of Certified Public Accountants (AICPA) , Financial Executives International (FEI) , the Institute of Internal Auditors (IIA) , and the National Association of Accountants , now known as Institute of Management Accountants (IMA). Wholly independent of each of the sponsoring organizations, the Commission included representatives from industry, public accounting, investment firms, and the New York Stock Exchange. To this day, COSO functions as a committee of the five Board Members led by its Chairman of the Board. The operations of the Committee and COSO overall are supported by the resources of the five Sponsoring Organizations. The first chairman of the National Commission was James C. Treadway, Jr. , Executive Vice President and General Counsel, Paine Webber Incorporated and a former Commissioner of the U.S. Securities and Exchange Commission. Hence, the popular name "Treadway Commission" Currently, the COSO Chairman is Lucia Wind . COSO’s goal is to provide thought leadership dealing with three interrelated subjects: Enterprise Risk Management (ERM), Internal Control, Fraud Deterrence and Governance. Sponsoring Organizations In Memoriam: Dr. Larry Rittenberg COSO is deeply saddened by the recent passing of Dr. Larry Rittenberg, a former COSO Board member and Chair. Larry was a highly respected leader in the accounting and internal audit professions. In addition to his service to COSO, he was deeply involved with The Institute of Internal Auditors and served as Chair of the Accounting Department at the University of Wisconsin–Madison. His contributions to governance, internal control, and the profession more broadly were significant and enduring. Those who worked closely with Larry remember not only his professional impact, but also his generosity, intellectual curiosity, and deep commitment to staying engaged. Even during his illness, Larry remained eager to connect, welcoming phone calls and seeking updates on COSO and the IIA with characteristic interest and care. Larry’s leadership, collegiality, and dedication will be greatly missed. COSO extends its sincere condolences to his family, friends, and colleagues. Larry’s obituary and service information are available through Cress Funeral Home in Madison, Wisconsin: https://www.cressfuneralservice.com/obituaries/larry-rittenberg

Guidance Internal Control - Integrated Framework Effective internal controls are good for business. This is perhaps an interesting way to introduce the purpose of this thought paper, but, as its authors, our collective knowledge is very straightforward in this regard. Internal controls have value beyond compliance and external financial reporting. Effective internal controls can help an organization articulate its purpose, set its objectives and strategy, and grow on a sustained basis with confidence and integrity in all types of information. The Committee of Sponsoring Organizations of the Treadway Commission (COSO) Internal Control—Integrated Framework, originally issued in 1992 and refreshed in 2013 (ICIF-2013 or Framework), was developed as guidance to help improve confidence in all types of data and information. In 2023 COSO issued supplemental guidance for organizations to achieve effective internal control over sustainability reporting (ICSR), using the globally recognized COSO Internal Control-Integrated Framework (ICIF). See More ICSR Report Internal Controls Documents Achieving Effective Internal Control Over Generative AI (2026) PDF ACHIEVING EFFECTIVE INTERNAL CONTROL OVER ROBOTIC PROCESS AUTOMATION (2024) PDF ACHIEVING EFFECTIVE INTERNAL CONTROL OVER SUSTAINABILITY REPORTING (ICSR) PDF (SPANISH) COSO ICSR PDF 1 2 3 4 1 ... 1 2 3 4 ... 4

COSO Ends Corporate Governance Framework Comment Period Amid Shifting Regulatory Landscape The Committee of Sponsoring Organizations of the Treadway Commission (COSO), has announced a withdrawal of its draft Corporate Governance Framework (CGF). The draft CGF has been withdrawn from public comment as COSO takes time to evaluate the extensive feedback received to date and engage further with stakeholders. This decision, made in collaboration with the National Association of Corporate Directors (NACD), comes amid a shifting regulatory and economic landscape for U.S. businesses and follows the recent passage of a wide-ranging federal law that introduces significant changes to corporate reporting and planning requirements. In light of these developments, COSO and NACD recognize the importance of ensuring that any revised draft framework aligns with the existing requirements and evolving expectations placed on public companies. Press Release

Blockchain and Internal Control Blockchain and Internal Control: The COSO Perspective COSO releases a new paper, sponsored by Deloitte, providing perspectives for using the COSO Internal Control – Integrated Framework (2013) to evaluate risks related to the use of blockchain in the context of financial reporting and to design and implement controls to address such risks. It is intended to help inform decisions regarding oversight, risks, and internal control over financial reporting (ICFR) in a blockchain environment. Executive Summary News Release

News What's New? COSO Announces Search for New Board Chair See More COSO Ends Corporate Governance Framework Comment Period Amid Shifting Regulatory Landscape (2025/07/15) See More Alternative Data: The COSO Perspective (2024/03/27) See More COSO Seeking New Board Chair (2022/05/18) See More COSO Releases New Guidance: Enterprise Risk Management for Cloud Computing (2021/07/28) See More COSO Releases New ERM Guidance: Creating and Protecting Value (2020/02/04) See More COSO Unveils New ERM Guidance to Help Organizations Improve Decision Confidence (2026/05/04) See More COSO Launches Fraud Risk Management Certificate Program (2025/04/30) See More Request for Proposal - Corporate Governance Framework (2024/01/31) See More COSO Releases: Enabling Organizational Agility in an Age of Speed and Disruption (2022/03/09) See More Compliance Risk Management: Applying the COSO ERM Framework (2020/11/11) See More Collaborative Work on ERM-ESG Alignment Earns UN ISAR Honors Promoting (2019/10/30) See More Corporate Governance: Guiding Principles for Board Oversight (2026/03/31) See More Achieving Effective Internal Control Over Robotic Process Automation (2024/12/12) See More COSO Releases New (ICSR) Supplemental Guidance (2023/03/30) See More COSO Board Approves Study on Sustainability/ESG (2022/02/24) See More Blockchain and Internal Control: The COSO Perspective (2020/08/04) See More COSO Issues Guidance for Healthcare Providers (2019/02/20) See More Achieving Effective Internal Control Over Generative AI (2026/02/23) See More COSO and NACD Award PwC US RFP for Development of Corporate Governance Framework (2024/05/21) See More COSO Names New Board Chair Ms. Lucia M. Wind to Succeed Paul J. Sobel in January (2022/12/15) See More COSO Releases New Guidance: Realize the Full Potential of Artificial Intelligence (2021/09/15) See More New COSO Guidance: Risk Appetite – Critical to Success (2020/05/20) See More COSO Releases Fraud Risk Management Guide: 2nd Edition See More

ERM Certificate Program COSO Enterprise Risk Management Certificate Program In 2018, the Committee of Sponsoring Organizations of the Treadway Commission (COSO) announced the launch of a learning program toward earning the COSO Enterprise Risk Management (ERM) Certificate. The program is offered by the American Institute of Certified Public Accountants (AICPA), The Institute of Internal Auditors (IIA), The Financial Executives International (FEI), and The Institute of Management Accountants (IMA). The COSO ERM Certificate is geared to professionals who play a risk management role in their organizations, consultants who provide advisory services related to ERM, and board members who provide oversight of ERM. The program comprises self-paced learning and a hands-on workshop. Upon successful completion and passing an online exam, candidates will receive an official COSO ERM Framework Certificate of completion and Digital Badge. The certificate demonstrates competency toward applying the integration of ERM with strategy and performance using COSO’s updated 2017 Enterprise Risk Management – Integrating with Strategy and Performance Framework. The ERM Certificate Program is available from the following organizations: Purchase Purchase Purchase