Every organization is required to use a recognized internal controls framework for its Sarbanes-Oxley program. The only framework recognized by the SEC is COSO s Internal Control Integrated Framework,... This description may be from another edition of this product.