The three lines of defence is a risk governance framework that splits responsibility for operational risk management across three functions. Individuals in the first line own and manage risk directly.

The plethora of individual roles in a typical security team can lead to duplicated effort and gaps where lines of responsibility are unclear. The three ... risk, providing a standardised risk ...