In the realm of financial services, the concept of the "three lines of defense" is a well-established framework for managing various risk functions. In this structure, the first line of defense typically consists of the business itself, while the second line of defense is occupied by specialized control functions.