Three Lines of Defense Model

Model describing business unit, compliance, and audit roles in managing risk.