Stop Defending The Three Lines Of Defense

3LOD Is Risk Management’s Single Biggest Bottleneck
It’s not you; it’s the model! The three lines of defense (3LOD) concept was initially developed as a corporate governance framework to implement segregation of duties requirements under the 2002 Sarbanes-Oxley Act. And in 2013, the Institute of Internal Auditors (IIA) promoted it as a solution to enhance risk management. But as anyone who has tried to implement it as a foundation for enterprise risk management will tell you, the ...