The implementation of an effective ERM program should have closely coordinated efforts to establish effective SOX compliance. As an enterprise risk manager of a publicly held company, you should be aware of risks associated with SOX rules compliance and should communicate appropriate risk matters to senior management for appropriate action. Describe and cite at least 2 examples of matters directly related to the COSO ERM framework that intersects with SOX compliance and warrant this level of reporting. What are the implications of inaction to the organization if these issues are not brought to light?