The insurgence of the novel COVID-19 pandemic and its ensuing effect on the domestic and global economies has required companies to consider potential remedies should they, or their counterparties, not be able to perform under contracts. One potential remedy is force majeure.
Can you assess the overall system of internal controls without considering risk management? I don’t think so, and neither does COSO. That is why there is a risk component in their internal control framework.
I returned this week from a vacation in Mexico, including a day at the Copper Canyon. Our tour guide took about 20 of us down the mountain side to see some Tarahumara Indian homes. I decided that I wanted to come back ahead of the group, finding my way back up the path and steps to our hotel at the top. What might happen along the way? In other words, what would a risk manager put on a list or heat map?