difference between ERM and the COSO Internal Control Framework is directional. The COSO Internal Control Framework is depicted as being integrated bottom to top viewing the organization as being a single unit with a single set of risks; ERM is depicted as being integrated across the organization allowing departments or divisions to have different objectives, risks, and responses to risks