by Elena Pykhova
The three lines of defence (3LOD) model, which had its origins in military planning and sports management, is now firmly engrained into the DNA of financial services firms. It is widely viewed as an important factor in the successful embedding of enterprise risk management. Designed by the Institute of Internal Auditors (IIA), the model distinguishes between the three groups (or lines) involved in effective risk management:
functions that own and manage risks; functions that oversee risks; functions that provide independent assurance.