Question 1
IntermediateGovernance, Guidance, and Regulation · Risk Management Framework
A rapidly growing Neo-bank is preparing for a regulatory audit. The auditor requests evidence of the 'Three Lines of Defense' model implementation. Which of the following scenarios best demonstrates an effective separation of duties within this framework?
Answer and explanation
Correct answer: D
In the Three Lines of Defense model, the First Line (Business/Operations) owns and manages the risk (executing CDD). The Second Line (Compliance/Risk) oversees risk and sets policy. The Third Line (Audit) provides independent assurance. Mixing these roles, such as Compliance doing the initial checks, compromises the framework's integrity.
