The structure of this programme is in line with COSO’s (Committee of Sponsoring Organisations of the Treadway Commission) Internal Control–Integrated Framework, which is one of the most widely recognised frameworks on enterprise risk management and internal control, comprising of five key areas: 1.