Governance & compliance
Three Lines Model
The Three Lines Model is the IIA framework describing governance, management, and internal audit roles regarding risk management and achieving organizational objectives. The three lines are: management controls (first line), risk management functions (second line), and internal audit assurance (third line). The model emphasizes both independence and collaboration.
Source: IIA Three Lines Model 2020