Having developed such a framework , an organization is well positioned to determine which control activities to implement to reduce risks and ultimately reduce fraud and errors .
The framework was developed over a number of years .