Governance & compliance

Three Lines Model

The Three Lines Model (IIA, 2020) describes the roles of the governing body, management and internal audit in governance, risk management and the achievement of organisational objectives. The three lines are the first line: management delivering products and services and managing risk; the second line: expertise, support and oversight on risk management; and the third line: internal audit, providing independent and objective assurance and advice. The model emphasises both independence and collaboration.

Source: IIA Three Lines Model 2020

Last updated:

← All terms