First Line of Defense — The first line of defense consists of the operational teams responsible for managing risks within their everyday activities. These teams apply controls, recognize problems, and escalate concerns arising from the business they conduct. Compliance oversight and independent audit provide separate supporting and assurance functions.

Added November 6, 2026