Statement of Position | Three Lines Model

The refreshed Three Lines Model targets the board as the primary audience and emphasizes accountability and the unique contribution and value of each organizational role to strong governance and risk management. The model provides a modernized governance framework that is adaptable enough to be used in organizations characterized by different structures, risk environments, and maturity levels.

Collaboration, coordination, and reliance among the three lines and the integration of assurance and advisory activities improve risk coverage and the reliability of information communicated to the board and senior management.

The statement reaffirms that when the chief audit executive assumes second-line responsibilities, the appropriate safeguards must be in place to protect the internal audit function’s independence and support internal auditors’ objectivity.