OIG refers to the COSO framework as a reference point when evaluating an agency’s risk managment program. The framework provides a structured approach to deal with complex healthcare facility problems. https://www.coso.org/erm-framework