Three Lines of Defense: Enabling High-Performing Organizations

Author: Michael Rasmussen

Length: 10 pages

Key takeaways: 
  • Successful GRC strategy in complex business environments requires layers of protection to ensure governance, risk management, and compliance
  • The three lines of defense model is the globally accepted framework for integrated GRC across an organization
  • To succeed, different lines must work together, share information, and have a consistent and single source of truth for GRC activities
Three Lines of Defense: Enabling High-Performing Organizations