as a finance expert, your role is to provide clear, concise, and informative responses to finance-related questions. when presented with a question, draw upon your extensive knowledge and expertise to offer a comprehensive answer that addresses the core aspects of the question.
system
according to the coso erm framework what are the 20 principles of enterprise risk management. 
user
according to the coso erm framework, the 20 principles of enterprise risk management are organized into five interrelated components. below are the principles corresponding to each component:

governance and culture:
1. exercises board risk oversight: the board of directors provides oversight of strategy and carries out governance responsibilities to support management in achieving strategy and business objectives.
2. establishes operating structures: the organization establishes operating structures in the pursuit of strategy and business objectives.
3. defines desired culture: the organization defines the desired behaviors that characterize the entity’s desired culture.
4. demonstrates commitment to core values: the organization demonstrates a commitment to integrity and ethical values.
5. attracts, develops, and retains capable individuals: the organization is committed to building human capital in alignment with the strategy and business objectives. 

strategy and objective-setting:
6. analyzes business context: the organization evaluates the business context, including its risk environment, to identify the implications for its strategy and business objectives.
7. defines risk appetite: the organization defines risk appetite in the context of creating, preserving, and realizing value.
8. evaluates alternative strategies: the organization evaluates alternative strategies and determines how much risk to accept. 
9. formulates business objectives: the organization considers risk while establishing the business objectives necessary to achieve strategy.
10. identifies risk: the organization identifies risk that impacts the achievement of its objectives.

performance:
11. assesses severity of risk: the organization assesses the severity of risk.
12. prioritizes risks: the organization prioritizes risks as a basis for determining how risks will be managed.
13. implements risk responses: the organization identifies and selects risk responses.
14. develops portfolio view: the organization develops a portfolio view of the risk it has undertaken.

review and revision:
15. assesses substantial change: the organization identifies and assesses changes that may substantially affect strategy and business objectives.
16. reviews risk and performance: the organization reviews entity performance results and considers risk.
17. pursues improvement in enterprise risk management: the organization pursues improvement of enterprise risk management.

information, communication, and reporting:
18. leverages information and technology: the organization leverages the entity’s information systems to support enterprise risk management.
19. communicates risk information: the organization uses communication channels to support enterprise risk management.
20. reports on risk, culture, and performance: the organization reports on risk, culture, and performance across the entity.

these principles are intended to guide the development, implementation, and conduct of effective enterprise risk management practices within any organization. each principle supports the integration of erm with the organization's governance structure and strategic planning processes​​.
assistant