Skip to content

FRM Part I · FRM Exam Part I · The Governance of Risk Management

In the three lines of defense model for risk governance at a bank, which function is the second line of defense?

The second line of defense is the independent risk management function, which sets risk limits and frameworks and monitors exposures. Business units that own risks form the first line, while internal audit, giving independent assurance to the board, forms the third line.

  1. ABusiness unit managers who originate and own the risks
  2. BThe independent risk management function that sets limits and monitors riskCorrect
  3. CThe internal audit function that provides independent assurance to the board
  4. DThe external auditor who reviews the financial statements

Explanation

The first line is the business units that take and own risk. The second line is the independent risk management and compliance oversight that sets frameworks, limits and monitors. Internal audit is the third line, so it is not the second.

Did you get it right without looking?

One question tells you little. A timed set on The Governance of Risk Management shows your real accuracy, how long you take and where you lose marks.

More The Governance of Risk Management questions