CRISC: Certified in Risk and Information Systems Control

By Isaca · Question Mode

QuestionQ47

VerifiedGovernance

Which of the following stakeholders are generally included as part of a line of defense within the three-lines-of-defense model?

Explanation

Legal teams commonly support the second line of defense by providing legal and regulatory compliance expertise, monitoring, and challenge to risk-management activities. Regulators and vendors are external parties, and the board provides governing-body oversight rather than functioning as a numbered line.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!