This study identifies the role of internal control system in good risk management practice with reference to Sarbanes-Oxley (SOX) Act or equivalent Japan-SOX (J-SOX) or Malaysian Code on Corporate Governance, MCCG. Methodology: This case study focuses on a multinational corporation (MNC) hosted in Malaysia. The enterprise’s risk management practices to be analyzed. Findings: It was found that the successful implementation of ERM relies on corporate governance,
especially periodic monitoring Originality: This study contributes to the literature as an in-depth study providing practical insights in terms of implementation of enterprise risk management in the industry on importance of internal auditing in managing risk.
