Second Line of Defense — The second line of defense provides functions such as compliance and risk oversight that support and challenge operational risk management. It develops guidance, monitors adherence, and reports concerns within its assigned responsibilities. Independent internal audit generally forms a separate third line rather than part of the second.

Added November 6, 2026