Under the IIA's Three Lines Model (2020), which entity bears primary responsibility for managing risks day-to-day?
-
A
The internal audit function (third line)
-
B
The board and governing body
-
C
Management and operational staff (first line)
-
D
The external auditor