The 'three lines of defence' model in UAE financial institution risk management consists of:
-
A
Business lines, risk/compliance functions, and internal audit
-
B
Regulators, external auditors, and internal audit
-
C
Board, executive management, and shareholders
-
D
Front office, middle office, and back office