COSO Component 2: Risk Assessment
Identifying Organizational Risks
Management identifies and analyzes risks that could prevent the organization from achieving its objectives. Risk assessment helps determine which controls are necessary to address those risks.
Summary
Risk assessment enables organizations to design controls that address significant risks.