Risk-based internal controls, COSO design, ISO 31000 integration, control testing, monitoring & dashboards