The COSO Enterprise Risk Management Framework stresses that effective risk management is comprised of just three interrelated components: internal environment, risk assessment, and control activities. helps management manage uncertainty, and its associated risk and opportunity, so they can create and maintain value. helps management set risk management policies that, if enforced, guarantee achievement of corporate objectives. stresses that risk management is the sole responsibility of top management