Having developed such a framework, an organization is well positioned to determine which control activities to implement to reduce risks and ultimately reduce fraud and errors.
The framework was developed over a number of years.