The problem with “Challenge” and “Oversight”
The last couple of weeks I have been pointing out some of the failings of the Three Lines of Defence (3LoD) Model of Risk Management. The red tape it creates and the outsourcing of responsibility for managing risk. However, there is something even worse about the 3LoD model. It has a fundamental flaw that risk and compliance functions