Across industries and time, the “three lines of defense” has been a cornerstone of operationalizing risk management programs. The Institute ...