Companies adopting a new internal control framework, recently updated by the Committee of Sponsoring Organizations, will have to think hard about whether control deficiencies they identify under the new framework might also signal deficiencies that need to be reported now under the old framework.
