Analysis: Comparing the IIA’s new ‘Three Lines Model’ to the old one

The Institute of Internal Auditors (IIA) last week unveiled a modernized version of its widely adopted “Three Lines of Defense Model” to reflect the evolving role of risk management and to encourage greater collaboration between business functions in a way the previous model did not.