IIA Review the Three Lines of Defense

The “Three Lines of Defense” model is widely used throughout industry as a framework for addressing risks in today’s increasingly complex world.  Originally proposed in a position paper from the Institute of Internal Auditors in 2013, the model proposes a “streamlined approach to risk management and control built on three layers — operational management, risk …