An update of the Three Lines of Defense
Organizations are human undertakings, operating in an increasingly uncertain, complex, interconnected, and volatile world. They often have multiple stakeholders with diverse, changeable, and sometimes competing interests. Stake-holders entrust organizational oversight to a governing body, which in turn delegates resources and authority to manage-ment to take appropriate actions, including managing risk.