Enterprise risk management requires considering composite risks from a portfolio perspective. This concept is not contemplated in the Internal Control—Integrated Framework, which focuses on achievement of objectives on an individual basis. Internal control does not require that the entity develop a portfolio view.