Lines of defence model
Layered governance allocating operational, review, and assurance roles.
Definition
A governance model recommended by the framework in which operational teams implement and manage systems (first line), compliance/privacy/security functions perform independent review and oversight (second line), and internal/external audit provides independent assurance (third line). The model clarifies role responsibilities and accountability, situating primary legal accountability with the policy‑owning ministry or authority.
Related Terms
Model of Digital Security
Framework of principles and components for information security and response....
Assurance model
Structured, risk‑proportionate assurance for AI uses....
digital security agency/council
Designated national body for coordinating digital security and enforcement....
Digital security agency / council
Designated national body responsible for digital security governance and enforcement....
Information Assurance Framework
Audit and assurance regime for information security....