... be made in accordance with a “suitable, recognized control framework” (Reg. 240.13a-15). Prior to 2013, COSO's 1992 Framework was the most common framework employed for this purpose. COSO 2013 internal control auditing control framework Recognizing that business and operating environments...