{"id":26774,"date":"2024-07-02T14:45:42","date_gmt":"2024-07-02T12:45:42","guid":{"rendered":"https:\/\/optimiso-group.com\/?p=26774"},"modified":"2024-07-02T14:45:42","modified_gmt":"2024-07-02T12:45:42","slug":"the-3-lines-of-defense-model","status":"publish","type":"post","link":"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/","title":{"rendered":"The 3 Lines of Defense Model"},"content":{"rendered":"

What do the fortifications of Carcassonne and Internal Control have in common? They both involve lines of defense that serve to protect the castle on one hand, and to reduce and manage risks on the other.<\/p>\n

In the context of governance, internal control, and risk management, the Three Lines of Defense Model is often discussed.<\/p>\n

This concept, initiated by the Institute of Internal Auditors (IIA<\/a>), primarily aims to reduce risks associated with errors and fraud in businesses.<\/p>\n

What exactly does it entail? What is the role of each line of defense? Discover this through concrete examples encountered in the field.<\/p>\n

\"Mod\u00e8le<\/p>\n

 <\/p>\n

The Role of the Three Lines of Defense<\/h2>\n

The “warrior” origin of the term line of defense perfectly illustrates its role against adverse events and risks. Their occurrence can be reduced if the organization is well-defined and each line performs its role effectively.<\/p>\n

The first line of defense<\/strong> represents risk management and controls handled by operational staff. These first-level controls are essential because they are directly related to the delivery of products or services to customers.<\/p>\n

The second line of defense<\/strong> represents risk management and controls performed by support functions such as the Head of Internal Control, the Risk Manager, or the Compliance Officer. They initiate the controls and ensure their proper execution by the first line.<\/p>\n

The third line of defense<\/strong> is the company’s internal audit, which is responsible for the administration of controls and, more broadly, the management of the risk control process.<\/p>\n

The first two lines are directly driven by the Executive Management, which initiates the strategy and sets objectives. Regularly, these two lines must report to the Management the results of the controls and actions implemented. The third line of defense, meanwhile, is more independent and provides assurance and advice to the Executive Management and the Board of Directors.<\/p>\n

\"3<\/p>\n

Here are two concrete examples to illustrate the Three Lines of Defense Model.<\/p>\n

 <\/p>\n

The Three Lines of Defense Model, example in a show ticket office<\/h4>\n

Let’s consider an example that everyone can understand: a show ticket office where there might be risks of errors or fraud. Controls can be implemented at multiple levels to manage these risks.<\/p>\n

\"3<\/p>\n

 <\/p>\n

The Three Lines of Defense Model, example in a bank<\/h4>\n

The Three Lines Model is very prevalent in the banking sector. For example, when creating new customer accounts, banks must conduct checks to ensure that the potential customer does not pose a risk to them.<\/p>\n

Here is a concrete illustration of what the three lines of defense might look like in this activity.<\/p>\n

\"3<\/p>\n

 <\/p>\n

Continuous and periodic control<\/h2>\n

The concepts of continuous control and periodic control are sometimes associated with the Lines of Defense. Is there a link between these two concepts?<\/p>\n

Continuous control<\/strong> covers the daily checks carried out by operational staff in the context of processing transactions (first level) and by internal control<\/a>, risk management, and compliance (second level).<\/p>\n

Periodic control<\/strong> allows for a certain perspective and encompasses the third-level controls conducted by internal audit (third level).<\/p>\n

\"periodic<\/p>\n

 <\/p>\n

Are there other lines of defense?<\/h2>\n

Depending on the industry, it is possible to find additional lines of defense. This may be related to the prevailing regulations or simply to the organization of the company.<\/p>\n

The fourth line of defense<\/strong>, although not always formalized, is present in many companies as it involves external entities that will be in charge of audits.<\/p>\n

The fifth line of defense<\/strong> is more specific to certain sectors such as banking. It consists of regulatory bodies such as the ACPR in France, FINMA in Switzerland, or BaFin in Germany.<\/p>\n

 <\/p>\n

The Three Lines of Defense Model is thus an essential tool<\/strong> to help companies adopt a structure and processes that are effective in reducing risks and achieving their objectives.<\/p>\n

The use of internal control software<\/strong><\/a> and risk management software<\/strong><\/a> also supports this by efficiently simplifying their management.<\/p>\n","protected":false},"excerpt":{"rendered":"

What do the fortifications of Carcassonne and Internal Control have in common? They both involve lines of defense that serve to protect the castle on one hand, and to reduce and manage risks on the other. In the context of governance, internal control, and risk management, the Three Lines of Defense Model is often discussed. […]<\/p>\n","protected":false},"author":6,"featured_media":21519,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","_mo_disable_npp":"","footnotes":""},"categories":[121],"tags":[],"class_list":["post-26774","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-articles-en"],"acf":[],"yoast_head":"\nThe 3 Lines of Defense Model - Optimiso Group<\/title>\n<meta name=\"description\" content=\"The 3 Lines of Defense model is used for governance, internal control and risk management.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The 3 Lines of Defense Model - Optimiso Group\" \/>\n<meta property=\"og:description\" content=\"The 3 Lines of Defense model is used for governance, internal control and risk management.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/\" \/>\n<meta property=\"og:site_name\" content=\"Optimiso Group\" \/>\n<meta property=\"article:published_time\" content=\"2024-07-02T12:45:42+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/optimiso-group.com\/wp-content\/uploads\/2022\/06\/fortification-carcassonne.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Fran\u00e7ois-R\u00e9gis Lafarge\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fran\u00e7ois-R\u00e9gis Lafarge\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/\"},\"author\":{\"name\":\"Fran\u00e7ois-R\u00e9gis Lafarge\",\"@id\":\"https:\/\/optimiso-group.com\/#\/schema\/person\/4a93bbfe4e52de7910640c3f612545d7\"},\"headline\":\"The 3 Lines of Defense Model\",\"datePublished\":\"2024-07-02T12:45:42+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/\"},\"wordCount\":649,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/optimiso-group.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/optimiso-group.com\/wp-content\/uploads\/2022\/06\/fortification-carcassonne.png\",\"articleSection\":[\"Articles\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/\",\"url\":\"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/\",\"name\":\"The 3 Lines of Defense Model - Optimiso Group\",\"isPartOf\":{\"@id\":\"https:\/\/optimiso-group.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/optimiso-group.com\/wp-content\/uploads\/2022\/06\/fortification-carcassonne.png\",\"datePublished\":\"2024-07-02T12:45:42+00:00\",\"description\":\"The 3 Lines of Defense model is used for governance, internal control and risk management.\",\"breadcrumb\":{\"@id\":\"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/#primaryimage\",\"url\":\"https:\/\/optimiso-group.com\/wp-content\/uploads\/2022\/06\/fortification-carcassonne.png\",\"contentUrl\":\"https:\/\/optimiso-group.com\/wp-content\/uploads\/2022\/06\/fortification-carcassonne.png\",\"width\":1000,\"height\":400,\"caption\":\"Mod\u00e8le des trois lignes de d\u00e9fense\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/optimiso-group.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The 3 Lines of Defense Model\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/optimiso-group.com\/#website\",\"url\":\"https:\/\/optimiso-group.com\/\",\"name\":\"Optimiso Group\",\"description\":\"Optimiso software turns your regulatory constraints into real benefits. Discover our simple and useful solutions for your projects related to internal organisation, ISO certifications, internal control and risk management.\",\"publisher\":{\"@id\":\"https:\/\/optimiso-group.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/optimiso-group.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/optimiso-group.com\/#organization\",\"name\":\"Optimiso Group\",\"url\":\"https:\/\/optimiso-group.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/optimiso-group.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/optimiso-group.com\/wp-content\/uploads\/2018\/03\/logo-optimiso-group.png\",\"contentUrl\":\"https:\/\/optimiso-group.com\/wp-content\/uploads\/2018\/03\/logo-optimiso-group.png\",\"width\":351,\"height\":177,\"caption\":\"Optimiso Group\"},\"image\":{\"@id\":\"https:\/\/optimiso-group.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/optimiso-group.com\/#\/schema\/person\/4a93bbfe4e52de7910640c3f612545d7\",\"name\":\"Fran\u00e7ois-R\u00e9gis Lafarge\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/optimiso-group.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/df285cbac769c2ada1c553ef2a78f681?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/df285cbac769c2ada1c553ef2a78f681?s=96&d=mm&r=g\",\"caption\":\"Fran\u00e7ois-R\u00e9gis Lafarge\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The 3 Lines of Defense Model - Optimiso Group","description":"The 3 Lines of Defense model is used for governance, internal control and risk management.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/","og_locale":"en_US","og_type":"article","og_title":"The 3 Lines of Defense Model - Optimiso Group","og_description":"The 3 Lines of Defense model is used for governance, internal control and risk management.","og_url":"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/","og_site_name":"Optimiso Group","article_published_time":"2024-07-02T12:45:42+00:00","og_image":[{"width":1000,"height":400,"url":"https:\/\/optimiso-group.com\/wp-content\/uploads\/2022\/06\/fortification-carcassonne.png","type":"image\/png"}],"author":"Fran\u00e7ois-R\u00e9gis Lafarge","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Fran\u00e7ois-R\u00e9gis Lafarge","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/#article","isPartOf":{"@id":"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/"},"author":{"name":"Fran\u00e7ois-R\u00e9gis Lafarge","@id":"https:\/\/optimiso-group.com\/#\/schema\/person\/4a93bbfe4e52de7910640c3f612545d7"},"headline":"The 3 Lines of Defense Model","datePublished":"2024-07-02T12:45:42+00:00","mainEntityOfPage":{"@id":"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/"},"wordCount":649,"commentCount":0,"publisher":{"@id":"https:\/\/optimiso-group.com\/#organization"},"image":{"@id":"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/#primaryimage"},"thumbnailUrl":"https:\/\/optimiso-group.com\/wp-content\/uploads\/2022\/06\/fortification-carcassonne.png","articleSection":["Articles"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/","url":"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/","name":"The 3 Lines of Defense Model - Optimiso Group","isPartOf":{"@id":"https:\/\/optimiso-group.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/#primaryimage"},"image":{"@id":"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/#primaryimage"},"thumbnailUrl":"https:\/\/optimiso-group.com\/wp-content\/uploads\/2022\/06\/fortification-carcassonne.png","datePublished":"2024-07-02T12:45:42+00:00","description":"The 3 Lines of Defense model is used for governance, internal control and risk management.","breadcrumb":{"@id":"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/#primaryimage","url":"https:\/\/optimiso-group.com\/wp-content\/uploads\/2022\/06\/fortification-carcassonne.png","contentUrl":"https:\/\/optimiso-group.com\/wp-content\/uploads\/2022\/06\/fortification-carcassonne.png","width":1000,"height":400,"caption":"Mod\u00e8le des trois lignes de d\u00e9fense"},{"@type":"BreadcrumbList","@id":"https:\/\/optimiso-group.com\/en\/articles-en\/the-3-lines-of-defense-model\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/optimiso-group.com\/en\/"},{"@type":"ListItem","position":2,"name":"The 3 Lines of Defense Model"}]},{"@type":"WebSite","@id":"https:\/\/optimiso-group.com\/#website","url":"https:\/\/optimiso-group.com\/","name":"Optimiso Group","description":"Optimiso software turns your regulatory constraints into real benefits. Discover our simple and useful solutions for your projects related to internal organisation, ISO certifications, internal control and risk management.","publisher":{"@id":"https:\/\/optimiso-group.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/optimiso-group.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/optimiso-group.com\/#organization","name":"Optimiso Group","url":"https:\/\/optimiso-group.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/optimiso-group.com\/#\/schema\/logo\/image\/","url":"https:\/\/optimiso-group.com\/wp-content\/uploads\/2018\/03\/logo-optimiso-group.png","contentUrl":"https:\/\/optimiso-group.com\/wp-content\/uploads\/2018\/03\/logo-optimiso-group.png","width":351,"height":177,"caption":"Optimiso Group"},"image":{"@id":"https:\/\/optimiso-group.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/optimiso-group.com\/#\/schema\/person\/4a93bbfe4e52de7910640c3f612545d7","name":"Fran\u00e7ois-R\u00e9gis Lafarge","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/optimiso-group.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/df285cbac769c2ada1c553ef2a78f681?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/df285cbac769c2ada1c553ef2a78f681?s=96&d=mm&r=g","caption":"Fran\u00e7ois-R\u00e9gis Lafarge"}}]}},"_links":{"self":[{"href":"https:\/\/optimiso-group.com\/en\/wp-json\/wp\/v2\/posts\/26774","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/optimiso-group.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/optimiso-group.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/optimiso-group.com\/en\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/optimiso-group.com\/en\/wp-json\/wp\/v2\/comments?post=26774"}],"version-history":[{"count":0,"href":"https:\/\/optimiso-group.com\/en\/wp-json\/wp\/v2\/posts\/26774\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/optimiso-group.com\/en\/wp-json\/wp\/v2\/media\/21519"}],"wp:attachment":[{"href":"https:\/\/optimiso-group.com\/en\/wp-json\/wp\/v2\/media?parent=26774"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/optimiso-group.com\/en\/wp-json\/wp\/v2\/categories?post=26774"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/optimiso-group.com\/en\/wp-json\/wp\/v2\/tags?post=26774"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}