This paper seeks to consider the better effectiveness of an audit after the use of ERM 2017 or ISO 31000. To this effect, is COSO existence and evolution will be considered and related to the biggest financial scandals and its output in terms of control schedules. Some criticisms to COSO Cube will be pointed out, and the new ERM 2017 will be described.  ISO 31000 will be considered as an alternative guideline to be used for Risk Management purposes in any organization. A comparison is made between the two sets of Risk management. The audit process will be developed after grasping that the company has a risk management implemented in a more certain fashion, as objectives are different but schemes of risk management control are valid. In terms of future research perspective, one could suggest the identification of organizations using one scheme (ERM) or another (ISO), analysing them and comparing them in order to evaluate their particular effectiveness and accrued value. (AU)