Owing to the finance fraud cases happening continuously, the U.S. COSO issued the Enterprise Risk Management Framework (ERM), a replacement of Internal Control-Integrated Framework, to supplement and define the contents of internal control and risk manage