[IOTF] COSO review and our work