Which function in the Three Lines of Defense model provides risk management oversight, policy guidance, and monitoring?

Prepare for the CMPE Organizational Governance Test with flashcards and multiple choice questions, complete with hints and explanations. Get ready to excel in your exam!

Multiple Choice

Which function in the Three Lines of Defense model provides risk management oversight, policy guidance, and monitoring?

Explanation:
The second line of defense handles risk management oversight, policy guidance, and monitoring. It sets the risk framework, defines risk appetite, and develops policies, while continuously monitoring risk across the organization and challenging the first line to ensure controls are effective. The first line owns day-to-day risk and implements controls in operations, the third line (internal audit) provides independent assurance on governance and controls, and external audit offers independent external assurance of financial reporting and related controls.

The second line of defense handles risk management oversight, policy guidance, and monitoring. It sets the risk framework, defines risk appetite, and develops policies, while continuously monitoring risk across the organization and challenging the first line to ensure controls are effective. The first line owns day-to-day risk and implements controls in operations, the third line (internal audit) provides independent assurance on governance and controls, and external audit offers independent external assurance of financial reporting and related controls.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy