The Evolving Role of Risk Management in the IIA's Updated Three Lines Model

The IIA's latest update to the Three Lines Model redefines the second line, prompting a critical re-evaluation of where risk management functions truly fit. This article challenges whether the new definition clarifies or further muddies the waters for internal audit professionals seeking to understand organizational risk oversight structures and their own assurance responsibilities.