Three Lines of Defence (AI)

The three lines of defence model applied to AI assigns risk ownership to the teams building agents (first line), independent risk and compliance functions (second line), and internal audit (third line). It ensures separation of duties in AI governance.