COSO
COSO is a voluntary private-sector organization jointly sponsored by five U.S. professional accounting associations that develops globally recognized frameworks and certificate programs for internal control, enterprise risk management, fraud deterrence, and corporate governance.
- Company typePrivate
- Founded1985
- Headquarters—
- Headcount1–10
- GTM typeB2B
- OfferingServices
What COSO does
COSO (Committee of Sponsoring Organizations of the Treadway Commission) is a voluntary private-sector organization organized in 1985 that provides thought leadership frameworks for enterprise risk management, internal control, fraud deterrence, and corporate governance. It is jointly sponsored by five major U.S. professional accounting associations — the American Accounting Association (AAA), American Institute of Certified Public Accountants (AICPA), Financial Executives International (FEI), Institute of Internal Auditors (IIA), and Institute of Management Accountants (IMA) — and operates independently of each, functioning as a committee led by a Board Chair with operations supported by the five sponsors. Its frameworks — including the Internal Control-Integrated Framework (1992, refreshed 2013), the 2017 Enterprise Risk Management Framework, the Fraud Risk Management Guide (2016, expanded 2023), and the 2026 Corporate Governance Guiding Principles — are globally recognized standards referenced by auditors, risk managers, boards, and governance professionals.
The organization monetizes primarily through three professional certificate programs (Internal Control, ERM, and Fraud Risk Management) delivered through its sponsoring organizations and partners such as the Association of Certified Fraud Examiners (ACFE). COSO does not produce commercial software; its "technology" is its body of frameworks, guidance documents, and the COSO Knowledge Hub (hub.coso.org), an online library of free downloadable research, white papers, and partner content. Revenue figures are not publicly disclosed.
COSO's go-to-market is community-led and event-driven: frameworks and certificate programs are distributed through the learning platforms of sponsoring organizations (AICPA, IIA, FEI, IMA) and partners (ACFE), with announcements amplified via PR Newswire and a LinkedIn group (ID 1808103). It also collaborates with major professional services firms — PwC, NACD, and Crowe LLP — on co-developed research and guidance, including the recent Achieving Effective Internal Control Over Generative AI publication and Corporate Governance: Guiding Principles for Board Oversight.
COSO firmographics
Firmographics- Name
- COSO
- Legal name
- Committee of Sponsoring Organizations of the Treadway Commission
- Website
- https://coso.org
- Company type
- Private
- Founded year
- 1985
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- COSO is a voluntary private-sector organization jointly sponsored by five U.S. professional accounting associations that develops globally recognized frameworks and certificate programs for internal control, enterprise risk management, fraud deterrence, and corporate governance.
- Ownership category
- akta.pro rank
COSO industry classification
Industry- Product category
- Risk Management and Internal Control Standards
- NAICS
- Software Publishers (5132)
- SIC
- Services-Membership Organizations (8600)
- akta.pro primary industry
- Governance, Risk & Compliance (GRC) Platforms (BPAEAPAA)
- akta.pro secondary industries
- Audit Management, Controls & SOX Compliance (BPAEAPAH), Risk, Controls & Governance (GRC) Platforms (FSAFAOAG), Regulatory Change, Governance & Compliance Management (GRC) (FSACAJAK)
Keywords
COSO business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Marketing or Sales, Technology or R&D, Others
Revenue model
- Certificate Program Fees: COSO generates revenue through official certificate programs (Internal Control, ERM, Fraud Risk Management) offered through sponsoring organizations including AICPA, IIA, FEI, and IMA. Participants pay for self-paced learning modules, certifying exams, and receive official COSO certificates and digital badges upon completion.
- Publication Sales and Access: COSO publishes guidance documents, frameworks, and research papers. While some content is freely available, certain premium publications may be sold or licensed.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | One time/ perpetual license | COSO Internal Control Certificate Program - offered through multiple sponsors |
| Other | One time/ perpetual license | COSO ERM Certificate Program - offered through multiple sponsors |
| Other | One time/ perpetual license | COSO Fraud Risk Management Certificate Program - offered through multiple sponsors |
Go-to-market motion2 records
Distribution channels5 records
Marketing channels4 records
COSO product offering
Product offeringCore offering
COSO develops and publishes widely recognized frameworks, guidance documents, and professional certificate programs covering internal control, enterprise risk management, fraud deterrence, and corporate governance. Its core deliverables include the Internal Control-Integrated Framework, the Enterprise Risk Management Framework, the Fraud Risk Management Guide, governance guiding principles, and three corresponding certificate programs (IC, ERM, Fraud Risk Management) delivered through five sponsoring professional associations.
Product overview
COSO (Committee of Sponsoring Organizations of the Treadway Commission) is a voluntary private sector organization organized in 1985 that provides thought leadership and frameworks for internal control, enterprise risk management, governance, and fraud deterrence. The organization's portfolio consists of three professional certificate programs (IC Certificate, ERM Certificate, and Fraud Risk Management Certificate) delivered through sponsoring organizations (AICPA, IIA, FEI, IMA); published frameworks and guidance documents including the Internal Control Integrated Framework, ERM Framework, and Fraud Risk Management Guide; and the COSO Knowledge Hub, a resource library of third-party content. COSO does not produce commercial software products but rather standards, guidance, and professional certifications.
Differentiator
Problem solved
Functional benefit
Products and services
- COSO Internal Control Certificate Program A professional certificate program based on the COSO Internal Control-Integrated Framework (ICIF) for audit leaders, team members, and consultants who design, implement, and conduct internal control systems. The program comprises self-paced learning and live classroom training with an online certifying exam, awarding an official COSO IC Framework Certificate of completion and Digital Badge. Offered through AICPA, IIA, FEI, and IMA.
- COSO Enterprise Risk Management (ERM) Certificate Program A learning program for earning certification in applying COSO's Enterprise Risk Management Framework to integrate risk management with strategy and performance. Targeted at risk management professionals, consultants, and board members providing ERM oversight. The program comprises self-paced learning, a hands-on workshop, and an online exam, awarding an official COSO ERM Framework Certificate of completion and Digital Badge. Offered through AICPA, IIA, FEI, and IMA.
- COSO Fraud Risk Management Certificate Program A certification program designed to enhance expertise in fraud risk management for professionals. Includes self-paced learning modules and a certifying exam, awarding an official COSO Fraud Risk Guide Certificate and Digital Badge upon completion. Built on the Fraud Risk Management Guide's five key principles and offered through ACFE, IIA, and IMA.
- COSO Internal Control Integrated Framework The foundational COSO framework for designing, implementing, and conducting effective internal control systems. Originally issued in 1992 and refreshed in 2013, the ICIF provides the basis for the Internal Control Certificate program and is widely referenced by organizations, auditors, and regulators.
- COSO Enterprise Risk Management Framework COSO's Enterprise Risk Management Framework providing thought leadership on integrating enterprise risk management with strategy setting and performance, supporting organizations in creating and protecting value. The 2017 update superseded the prior ERM framework and underpins the ERM Certificate program.
- COSO Fraud Risk Management Guidance COSO's fraud deterrence and fraud risk management guidance, including the Fraud Risk Management Guide originally released in 2016 and expanded in 2023. Outlines five key principles for establishing effective fraud risk management programs and provides a comprehensive approach to identifying, assessing, and mitigating fraud risks.
- COSO Corporate Governance Framework COSO's framework addressing corporate governance, including the Corporate Governance: Guiding Principles for Board Oversight released in 2026. Provides boards with twelve guiding principles covering oversight, accountability, and long-term value creation in an evolving governance landscape.
- COSO Knowledge Hub An online resource library of free downloadable content including white papers, guides, reports, research, industry analysis, and resources from partner organizations supporting internal control, risk management, governance, and fraud deterrence. Content is categorized by company, topic, and content type.
Quantifiable outcome
- 98% of respondents believe ERM should play a strategic role, yet only 7% report ERM is fully integrated into strategy decisions
- +1 more outcomes
Companies that use COSO
Customer profileSegments4 records
Ideal customer profiles4 records
COSO technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability2 records
Feature5 records
COSO partnerships and signals
Strategic signalPartnerships
Ten partnerships are on record, tiered flagship and core.
- Crowe LLPflagshipCrowe LLP authored the research paper 'From Guidance to Action: Exploring Practical Enterprise Risk Management' based on a global survey of risk leaders. The research provides organizations with a framework toolkit for embedding risk thinking into everyday decision-making.
- PwCflagshipPwC collaborated with COSO to develop 'Corporate Governance: Guiding Principles for Board Oversight,' providing boards with twelve guiding principles for oversight, accountability, and long-term value creation.
- Association of Certified Fraud Examiners (ACFE)flagshipACFE collaborated with COSO to introduce the COSO Fraud Risk Management Certificate program in 2025, offered through IIA and IMA in addition to ACFE. The program builds on the Fraud Risk Management Guide (FRMG).
- National Association of Corporate Directors (NACD)flagshipCOSO collaborated with NACD to issue an RFP and award a Professional Services Agreement to PwC US for developing a Corporate Governance Framework (CGF). NACD is a COSO collaborating organization for governance initiatives.
- PwC USflagshipPwC US was awarded the Professional Services Agreement after a competitive RFP process to assist COSO in developing the Corporate Governance Framework (CGF), in collaboration with NACD.
- American Accounting Association (AAA)coreAAA is one of five original sponsoring organizations of COSO, jointly supporting the organization since its formation in 1985 to sponsor the National Commission on Fraudulent Financial Reporting.
- American Institute of Certified Public Accountants (AICPA)coreAICPA is one of five original sponsoring organizations of COSO. It offers COSO certificate programs (IC and ERM) through its learning platform and collaborates on thought leadership development.
- Financial Executives International (FEI)coreFEI is one of five original sponsoring organizations of COSO. It offers COSO certificate programs and collaborates on professional development initiatives.
- Institute of Internal Auditors (IIA)coreIIA is one of five original sponsoring organizations of COSO. It manages the board chair application process and offers COSO certificate programs (IC, ERM, Fraud Risk Management) through its learning solutions platform.
- Institute of Management Accountants (IMA)coreIMA is one of five original sponsoring organizations of COSO, formerly known as National Association of Accountants. It offers COSO certificate programs through its learning platform.
Scale indicators3 records
Recent moves6 records
Expansion highlights6 records
COSO competitors and assessment
Company assessmentMarket position
Weaknesses4 records
Competitive moat5 records
Key risks5 records
Key highlights6 records
Customer concentration
COSO social profiles
Digital presenceCOSO financial estimates
Financial estimateRevenue estimate
Valuation estimate
COSO leadership team
Management profileNumber of profiles
Profiles2 records
COSO funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
COSO M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about COSO
What does COSO do?
COSO develops and publishes widely recognized frameworks, guidance documents, and professional certificate programs covering internal control, enterprise risk management, fraud deterrence, and corporate governance. Its core deliverables include the Internal Control-Integrated Framework, the Enterprise Risk Management Framework, the Fraud Risk Management Guide, governance guiding principles, and three corresponding certificate programs (IC, ERM, Fraud Risk Management) delivered through five sponsoring professional associations.
Is COSO a public or private company?
COSO is a private company. It is classified as nonprofit foundation owned and is currently operating.
When was COSO founded?
COSO was founded in 1985. It employs 1 to 10 people.
How does COSO make money?
Two revenue lines are on record. Certificate Program Fees are the primary driver. The others are publication Sales and Access.
Does COSO have an API?
No public API is recorded for COSO.
What industry is COSO in?
COSO's product category is Risk Management and Internal Control Standards. Its primary akta.pro industry code is BPAEAPAA, Governance, Risk & Compliance (GRC) Platforms, with a secondary code of BPAEAPAH, Audit Management, Controls & SOX Compliance. Its NAICS code is 5132 and its SIC code is 8600.