Risk management should help us make better decisions, not create more paperwork. Yet Principle 21 of COSO’s draft framework, while containing some good ideas, pushes companies toward the same old mistakes that have plagued risk management for years. Let me be clear: linking risk to strategy is smart. Looking at both threats and opportunities makes… Continue reading Critique of draft COSO Corporate Governance Framework: Principle 21