COSO defines risk as the possibility that an event will occur and adversely affect the achievement of an objective, ISO defines risk as “effect of uncertainty on objectives.”-Risk are inherent in all aspects of life-that is, wherever uncertainty exists, one or more risks exist.