企业风险管理整合框架及其评价.pdfVIP

,(COSO), ,,1992 ,COSO ——,. 2004 9 ,COSO ——,—— ,, (nature) ., 2001 ,COSO , ,, 2002 - , , 2004 9 ,COSO ——,, COSO , ,, , () COSO ,, ,,, , ,:; COSO :(1) ,:(2);(3) ;(4), ,;(5) ,;(6) :(7) COSO “”,, ,,, , COSO ,: (1)(risk appetite) , (2) (3), (4) ,, (5), (6),, () COSO ,:(1) ;(2) , ,, , .: : , COSO 2003 10 () .. , GRC(Governance,Risk,Compliance) , GRC , (Governance)(Enterprise Risk Management)(Comphance), ,,, ;, ;, :(1)(Stntegic),, ;(2)(operations),;(3)(reporting), ;(4)(compliance), ,: ,,, , .,, , , ,, 2004 ——(Integrity-Driven Performance):“ , ”“”,“”, “ ” 1994 “” ,COSO , ,.,, , , ,, ,, , —— ,, (1), (), (2), , , (3) , (4), ,, (5), (6) (7) (8), , ,: “”“”,“” ,, , . ,COSO 1999 ,COSO ,, ,, . , , , , , ,,, , ——, ,:(CEO), :, ;; ;, , ,, COSO —— ,, ,