Skip to content

Glossary: Compliance, Privacy and Penetration Testing

Three Lines Model

Also written: first line, second line, third line

The Institute of Internal Auditors' model of oversight. The first line runs the business (Alex), the second line sets rules and monitors (compliance), and the third line is internal audit, reporting to the board.

Where the book teaches it

Related terms

Compliance functionGoverning bodyAudit committee