Putting the COSO Framework into action