nerdexam
Isaca

CRISC · Question #205

Which of the following is the GREATEST benefit of a three lines of defense structure?

The correct answer is C. Clear accountability for risk management processes. The greatest benefit of implementing a three lines of defense structure is the establishment of clear accountability for risk management processes.

Submitted by salim_om· Apr 18, 2026Governance

Question

Which of the following is the GREATEST benefit of a three lines of defense structure?

Options

  • AAn effective risk culture that empowers employees to report risk
  • BEffective segregation of duties to prevent internal fraud
  • CClear accountability for risk management processes
  • DImproved effectiveness and efficiency of business operations

How the community answered

(22 responses)
  • A
    5% (1)
  • C
    91% (20)
  • D
    5% (1)

Why each option

The greatest benefit of implementing a three lines of defense structure is the establishment of clear accountability for risk management processes.

AAn effective risk culture that empowers employees to report risk

While an effective risk culture is a desirable outcome, the primary structural benefit of the three lines of defense model is the clarity it provides regarding risk accountability, which then supports culture development.

BEffective segregation of duties to prevent internal fraud

Effective segregation of duties is an important internal control, but the three lines of defense model addresses the broader organizational structure for managing *all* types of risks, not solely focusing on fraud prevention.

CClear accountability for risk management processesCorrect

The three lines of defense model clearly defines distinct roles and responsibilities across the organization for risk management, including operations (first line), risk and compliance functions (second line), and internal audit (third line). This clear delineation ensures that accountability for identifying, assessing, managing, and monitoring risks is well-established, preventing gaps or overlaps in oversight.

DImproved effectiveness and efficiency of business operations

Improved effectiveness and efficiency of business operations can be a positive consequence of better risk management, but the core benefit of the three lines of defense structure is its clear assignment of risk responsibilities.

Concept tested: Three lines of defense accountability

Source: https://www.theiia.org/en/content/positions/three-lines-model/

Topics

#Three lines of defense#Risk governance#Accountability#Organizational structure

Community Discussion

No community discussion yet for this question.

Full CRISC Practice