1-2 Activity: Risks and the COSO Framework