CRMA· IIA
Certification in Risk Management Assurance (IIA)
IIA’s CRMA specialises audit on risk management (ERM, COSO ERM 2017, Three Lines Model). Single 10-week exam path.
Term DefinitionFrameworks
Three Lines Model
A governance framework distributing control responsibilities across three levels.
The IIA's Three Lines Model (2020) defines: 1st line = operational management owning risks and controls, 2nd line = risk, compliance and control functions that supervise and advise, 3rd line = internal audit providing independent assurance. It clarifies roles for effective governance and avoids overlaps or coverage gaps. The 2020 revision emphasizes collaboration between the three lines rather than strict separation, and reaffirms the central role of the board of directors.
📌 Key points
- 1st line: operational management — owns and manages risks day-to-day
- 2nd line: risk and compliance functions — oversees, advises, and sets policies
- 3rd line: internal audit — independent assurance to the board and senior management
- The 2020 model replaces the old '3 lines of defense' — emphasis on collaboration
- The board of directors sits above all three lines
Related certifications
These certifications cover the concept of "Three Lines Model" in depth.
CIA· IIA
Certified Internal Auditor (IIA, 3 Parts)
The IIA CIA certification covers this concept in Part 1 (framework, IPPF) and Part 2 (audit practice). 60+ lessons and 1,258 original questions.
🔗 Related concepts
AuditRiskFrameworksAuditControls
Internal Audit
An independent, objective assurance and consulting activity to add value to operations.
Enterprise Risk Management (ERM)
An integrated, holistic approach to identifying and managing all organizational risks.
IPPF (International Professional Practices Framework)
The IIA's global framework of standards and guidance for internal audit.
Audit Universe
A comprehensive inventory of auditable processes and entities in an organization.
Control Objective
A statement of what a control aims to ensure.
📖 Related articles
Master this concept and more
Start your GRC certification journey today.