Similarities and differences between COSO ERM and ISO 31000 - descriptive and content analyzes

Abstract

The academic interest on risk management research increased over the last years. What was previously treated in isolation, these days are essential to be treated by the entire company. Thus, the parts that make up the risk processes of the organizations must be studied in a continuous way aiming at optimizing the whole process. Despite having several guidelines, COSO ERM and ISO 31000 are the most accepted by risk management professionals. Therefore, the present article aims to outline a profile on COSO ERM and ISO 31000 into the scientific productions and highlight the main similarities and differences between them. In order to reach the objective, a descriptive and a content analysis was carried out, with samples of documents extracted from the Web of Science Core Collection database, from 2017 to 2021. After the analyzes, it was possible to identify the consistent evolution of the publications, diversity of journals interested in the subject, interdisciplinarity between quality management and risk management and finally list differences and similarities between COSO ERM and ISO 31000.