Third Line of Defense — The third line of defense provides independent assurance about governance, risk management, and controls. Internal audit commonly performs this role by assessing whether the first and second lines operate effectively. Its independence distinguishes assurance work from managing the controls being reviewed.

Added November 6, 2026