The Institute of Internal Auditors has updated its Three Lines of Defense Model to emphasize more active forms of risk management and governance.that go beyond merely defensive moves by the internal audit function.
IIA updates Three Lines Model to stress risk management and governance