"In establishing a portfolio view of risk responses, management will recognize the diversity of responses selected and the
effect of multiple responses on the entity’s risk tolerances. Where potential events are not directly related, management
may assess the effect of its risk response on these events individually and then form a composite, or portfolio view. Where
similar risks exist within multiple business units, management may decide to assess the effect of its risk responses on the
particular type or category of events, and then take a portfolio view. The portfolio view would typically reflect any offsets
– events representing opportunities or events that would mitigate the negative effect of other events – that exist within
the portfolio, as well as the cumulative effect of all responses."
COSO