According to the IIA's Three Lines Model, which group is primarily responsible for managing risk on a day-to-day basis?
-
A
The board and senior management (governing body)
-
B
Internal audit (third line)
-
C
Risk and compliance functions (second line)
-
D
Operational management and staff (first line)