A fuller title is COSO [Committee of Sponsoring Organisations for the Treadway Commission] 2012, Enterprise Risk Management—Understanding and Communicating Risk Appetite [Authors Larry Rittenberg, Frank Martens]
Available as a free online resource.
High resolution on the basics of internal audit and risk management