Risk and compliance

Three lines of defence

  • Risk and compliance

Definition

A model where operational teams own risk, a second line oversees it, and internal audit reviews independently.

For your role

Choose your role to see what this term means in your work.

Why it matters

It makes clear who manages risk, who challenges it and who checks it.

Where it is used

Financial services, regulated industries and governance frameworks.