The Enterprise Risk Management—Integrated Framework is a set of guiding principles established by the Committee of Sponsoring Organizations (COSO) to help companies manage their business risks.