A risk architect is designing a three lines of defense model. Which function represents the second line of defense?
-
A
Business units owning and managing risks day-to-day
-
B
Risk and compliance functions providing oversight and challenge
-
C
Internal audit providing independent assurance
-
D
External auditors and regulators