Back to Glossary
Term Definition

Three Lines Model

A governance framework distributing control responsibilities across three levels.
The IIA's Three Lines Model (2020) defines: 1st line = operational management owning risks, 2nd line = risk, compliance and control functions, 3rd line = internal audit. It clarifies roles for effective governance.
Master this concept and more
Start your GRC certification journey today.
Explore Academy
Three Lines Model | GRC Glossary NexusGRC | NexusGRC