Utk yg mo Bantu2 Keuangan saya..monggo ke Bank Central Asia BCA 5520166779 a.n. Andreas Tparlaungan Manurung (Indonesia) For those who would like to help support my finances ..please feel free to send it to Bank Central Asia (BCA) account number 5520166779 under the name Andreas Tparlaungan Manurung (Indonesia)

The Three Lines Model (updated by the Institute of Internal Auditors / IIA) is a foundational corporate governance framework designed to clarify how key roles and responsibilities within an organization coordinate to manage risk, ensure effective internal controls, and achieve strategic objectives.

In a Limited Liability Partnership (LLP) or Limited Company (LTD), it establishes clear boundaries between daily operations, oversight functions, and independent assurance.

Key Roles Across the Three Lines

Line / Element	Primary Role & Ownership	Focus & Core Responsibilities	Key Stakeholders / Roles (LTD/LLP)
Governing Body	Oversight & Strategy	Accountable to stakeholders for governance; sets organizational objectives, risk appetite, and delegates operational authority.	Board of Directors, Executive Committee, or Designated LLP Partners.
First Line (Operational)	Risk Delivery & Management	Directly owns and manages operational risks; implements day-to-day internal controls, processes, and compliance routines.	Department Heads, Operations Managers, Frontline Staff, Managing Partners.
Second Line (Oversight)	Risk Compliance & Expertise	Provides specialized expertise, frameworks, tools, and monitoring to assist the First Line; ensures compliance and risk policy alignment.	Risk Management, Compliance Officers, Information Security (CISO), Legal Counsel.
Third Line (Independent)	Independent Assurance	Provides objective assurance to the Governing Body on the effectiveness of both First and Second Line governance and control structures.	Internal Audit Function (Internal Audit Committee).

Core Mechanics of the Model

• Frontline Ownership (1st Line): The teams executing business operations own the risks inherent in their activities. They maintain control measures to prevent operational failure or non-compliance.
• Support & Monitoring (2nd Line): Acts as an internal control system, helping structure risk management policies, tracking legal/regulatory shifts, and validating that First Line controls function as designed.
• Objective Evaluation (3rd Line): Operates independently of management. Internal Audit reports directly to the Governing Body or Audit Committee to guarantee unbiased evaluation of management's risk controls.
• Where External Audit Fits: While technically outside the internal governing structure, External Audit operates as an external assurance mechanism. It relies on, evaluates, and provides feedback on the integrity of all three internal lines, reporting primarily to external stakeholders and the Governing Body.