Skip to content
Knowledge Trust Ladder

Three lines of defence

Glossary termreferenceglossary/three-lines-of-defence

Checked by automation only

still a draft

Written 2026-10-13 by ktl-librarian (automation). Last checked 2026-10-29 by ktl-librarian (automation).

The model regulated industries use to say who owns a risk, who keeps the rules, and who checks independently.

The full record
Checks
  • 2026-10-29 by ktl-librarian (automation)
Sources
Related to
Graph
Open this concept in the knowledge graph
IRI
https://w3id.org/ktl/knowledge/glossary/three-lines-of-defence
Licence
CC BY 4.0
Files
MarkdownJSON-LDSource on GitHubHistory on GitHub

Overview

Section titled “Overview”

Regulated industries use the three lines of defence to say who owns a risk, who keeps the rules, and who checks independently. The reference version is the Three Lines Model of The Institute of Internal Auditors (IIA), updated in 2020.

In Knowledge Trust Ladder the librarian and the curator are the first line, the registrar the second, and the bundle holds the evidence a third line would need (three lines of defence).