Sapa Conference Day 1 - Third Line Of Defense

I, II and IV

I, II and III

I, IV, and V

I, III, IV

The auditors

Operational Management

The compliance department

The enterprise risk management department

Because in the real world, a single line of defense is inadequate

To monitor the first line-of-defense control

To ensure that the first line of defense is properly designed, in place and operating as intended

All of the above

Providing risk management frameworks

Providing the governing body and senior management with comprehensive assurance

Monitoring the adequacy and effectiveness of internal controls.

Facilitating and monitoring implementation of effective risk management practices

Because the first and second line are not to be trusted

To ensure that the auditors have a job in the organization

Because the high level of independence is not available in the second line of defense

To assist management in developing processes and controls to management risks