Who is PRIMARILY accountable for identifying risk on a daily basis and ensuring adherence to the organization's policies?

The third line of defense (internal audit) provides independent assurance but is not involved in daily operational risk management.

'Line of defense subject matter experts' is not a standard or specific designation within the three lines of defense model for daily risk accountability.

The second line of defense (risk management, compliance) develops policies and provides oversight, but primary daily accountability rests with the first line.

The first line of defense consists of operational management and staff who own and manage risks as part of their daily business activities, making them directly accountable for daily risk identification and policy adherence. This direct involvement ensures that risks are addressed where they originate within business processes.