Charles Sturt University
Charles Sturt University

Audit and Risk Management

Both Risk Management and Internal Audit play an essential role in the governing of our University.  The most common concept regarding these two functions and their relationship is shown in the following "Three Lines of Defense" diagram:

Three Lines of Defense 

In the Three Lines of Defense model, Management Controls are the 1st Line of Defence in risk management.  The various risk control and compliance oversight functions established by management are the 2nd Line of Defense and Independent Assurance is the 3rd Line of Defence.