Many organisations are suffering losses due to ineffective risk management and audit functions. Based on the principles of the three lines of defence, it is clear that the functions of risk management and internal audit ...