Question: what is the difference between the first second and third line of defense?
Answer: the first line of defence – functions that own and manage risk. the second line of defence – functions that oversee or specialise in risk management, compliance. the third line of defence – functions that provide independent assurance, above all internal audit.