---
title: Governance, Risk and Compliance (GRC) and Technology’s Role in the ‘Three Lines of Defence’
description: Governance, risk and compliance management, Three lines of defence, RegTech
image: https://resources.model-office.co.uk/hubfs/Screenshot%202021-08-12%20at%2009.19.11.png
---

[![Screen_Shot_2016-06-16_at_10.33.04.png](https://resources.model-office.co.uk/hs-fs/hubfs/MO%20Logo.jpg?width=1678&height=274&name=MO%20Logo.jpg "Screen_Shot_2016-06-16_at_10.33.04.png")](http://model-office.co.uk)

- [Home](http://www.model-office.co.uk)
- [About Us](http://www.model-office.co.uk)
- [Contact Us](http://www.model-office.co.uk)

# The Model Office Blog

## [Governance, Risk and Compliance (GRC) and Technology’s Role in the ‘Three Lines of Defence’](https://resources.model-office.co.uk/grcandthreelinesofdefence)

 \[fa icon="calendar"\] Aug 12, 2021 9:30:40 AM / by [Chris Davies](https://resources.model-office.co.uk/author/chris-davies)

- [Tweet](https://twitter.com/share)

Let’s start with the top three challenges firm’s face when it comes to GRC management.

1. It’s raining regulations
2. ‘Swivel chair’ compliance can create disparate resources and dysfunction
3. Without a cohesive, coordinated approach, systems and controls may not be deployed effectively

Many organisations employ the ‘three lines of defence model’ which is designed to coordinate risk and control management across the business through mapping out responsibilities for management (first line), monitoring and oversight (second line) and independent assurance (third line).

The three lines of defence model

![Screenshot 2021-08-12 at 09.20.44](https://resources.model-office.co.uk/hs-fs/hubfs/Screenshot%202021-08-12%20at%2009.20.44.png?width=1406&name=Screenshot%202021-08-12%20at%2009.20.44.png)

Even for organisations who have well-developed risk management practices, achieving integration, effective communication, data-sharing and analytics between the three lines can be challenging.

An [EY report and survey](https://assets.ey.com/content/dam/ey-sites/ey-com/en_gl/topics/advisory/ey-are-your-internal-controls-in-harmony-with-your-business-unlocked.pdf) for internal audit professionals found that leading organisations tend to follow a similar strategy to assessing and improving their internal systems and controls and ensuring the three lines of defence are working in harmony:

**Three components of effective risk management**

**Level 1: Methods, Practices and Technology:** The foundation or risk management are the methods, practices and technology used to support risk management. Technology enablement, control design and documentation and reporting on control effectiveness are all at the heart of assessing, managing and reporting risk. Data analytics is very much an untapped resource for internal audit and compliance functions something MO® offers in abundance.

**Level 2: Resources:** This includes, technology, documents, people, management methods and third parties. MO® has structured all GRC responsibilities into 6 key resources that can be easily accessed, providing real-time data and MI

**Level 3: Governance:** Ensuring the organisation has a robust oversight framework, strategy, system and control. MO® will ensure evidence-based practice and internal controls for boards, committees and internal/external auditors to ensure they know (not think) they comply

Model Office and the Three Lines of Defence: 

![Screenshot 2021-08-12 at 09.19.11](https://resources.model-office.co.uk/hs-fs/hubfs/Screenshot%202021-08-12%20at%2009.19.11.png?width=1400&name=Screenshot%202021-08-12%20at%2009.19.11.png)

Model Office-MO® ensures:

- Three lines of GRC management are aligned and second/third lines reported
- Real-time data analytics and management information for clear communications and management of all risks
- Dependent on your GRC defence model, MO® maybe deployed across a single defence tier or multiple tiers plus as MO® is SaaS and Cloud based, the system can integrate with other GRC resources and technologies

**Summary**

When the three lines of defence work together — with the operational and risk management, compliance, and internal audit functions coordinating and sharing data; your organisation is better protected and prepared to meet its goals and improve performance.

 Please click the below icon link to **MO®'s** platform and learn more about **MO®** today..

[![New Call-to-action](https://no-cache.hubspot.com/cta/default/1686566/e6b77b79-2c51-4439-8400-ca1c62ce071f.png)](https://cta-redirect.hubspot.com/cta/redirect/1686566/e6b77b79-2c51-4439-8400-ca1c62ce071f)

---

 

 Topics: [Financial regulation](https://resources.model-office.co.uk/topic/financial-regulation), [Financial business development](https://resources.model-office.co.uk/topic/financial-business-development), [fintech](https://resources.model-office.co.uk/topic/fintech), [regtech](https://resources.model-office.co.uk/topic/regtech), [Risk management](https://resources.model-office.co.uk/topic/risk-management), [practice management](https://resources.model-office.co.uk/topic/practice-management), [FCA](https://resources.model-office.co.uk/topic/fca), [advice](https://resources.model-office.co.uk/topic/advice), [HMT](https://resources.model-office.co.uk/topic/hmt), [suitability](https://resources.model-office.co.uk/topic/suitability), [MiFIDII](https://resources.model-office.co.uk/topic/mifidii), [Data](https://resources.model-office.co.uk/topic/data), [GDPR](https://resources.model-office.co.uk/topic/gdpr), [Culture](https://resources.model-office.co.uk/topic/culture), [Enforcement](https://resources.model-office.co.uk/topic/enforcement), [supervision](https://resources.model-office.co.uk/topic/supervision), [audit](https://resources.model-office.co.uk/topic/audit), [Conduct](https://resources.model-office.co.uk/topic/conduct), [auto advice](https://resources.model-office.co.uk/topic/auto-advice), [streamlined advice](https://resources.model-office.co.uk/topic/streamlined-advice), [AI](https://resources.model-office.co.uk/topic/ai), [GRC](https://resources.model-office.co.uk/topic/grc), [governance](https://resources.model-office.co.uk/topic/governance), [compliance](https://resources.model-office.co.uk/topic/compliance)

#### Written by [Chris Davies](https://resources.model-office.co.uk/author/chris-davies)

### Subscribe to Email Updates

- Recent
- Popular
- Categories

### Lists by Topic

- [Financial regulation (143)](https://resources.model-office.co.uk/topic/financial-regulation)
- [Risk management (143)](https://resources.model-office.co.uk/topic/risk-management)
- [regtech (143)](https://resources.model-office.co.uk/topic/regtech)
- [FCA (142)](https://resources.model-office.co.uk/topic/fca)
- [practice management (142)](https://resources.model-office.co.uk/topic/practice-management)
- [fintech (135)](https://resources.model-office.co.uk/topic/fintech)
- [Financial business development (116)](https://resources.model-office.co.uk/topic/financial-business-development)
- [HMT (103)](https://resources.model-office.co.uk/topic/hmt)
- [Data (101)](https://resources.model-office.co.uk/topic/data)
- [advice (100)](https://resources.model-office.co.uk/topic/advice)
- [suitability (91)](https://resources.model-office.co.uk/topic/suitability)
- [MiFIDII (85)](https://resources.model-office.co.uk/topic/mifidii)
- [FAMR (84)](https://resources.model-office.co.uk/topic/famr)
- [FAWG (79)](https://resources.model-office.co.uk/topic/fawg)
- [AI (77)](https://resources.model-office.co.uk/topic/ai)
- [Culture (74)](https://resources.model-office.co.uk/topic/culture)
- [GDPR (74)](https://resources.model-office.co.uk/topic/gdpr)
- [Risk, (74)](https://resources.model-office.co.uk/topic/risk)
- [Enforcement (73)](https://resources.model-office.co.uk/topic/enforcement)
- [supervision (72)](https://resources.model-office.co.uk/topic/supervision)
- [audit (70)](https://resources.model-office.co.uk/topic/audit)
- [client engagement (69)](https://resources.model-office.co.uk/topic/client-engagement)
- [Conduct (68)](https://resources.model-office.co.uk/topic/conduct)
- [Chatbot (67)](https://resources.model-office.co.uk/topic/chatbot)
- [Accountability (60)](https://resources.model-office.co.uk/topic/accountability)
- [Platforms (59)](https://resources.model-office.co.uk/topic/platforms)
- [PROD (57)](https://resources.model-office.co.uk/topic/prod)
- [Product governance (57)](https://resources.model-office.co.uk/topic/product-governance)
- [Regulatory (56)](https://resources.model-office.co.uk/topic/regulatory)
- [Reporting (56)](https://resources.model-office.co.uk/topic/reporting)
- [digital, (56)](https://resources.model-office.co.uk/topic/digital)
- [SMCR (51)](https://resources.model-office.co.uk/topic/smcr)
- [compliance (36)](https://resources.model-office.co.uk/topic/compliance)
- [Constructive compliance (35)](https://resources.model-office.co.uk/topic/constructive-compliance)
- [Benchmark, compliance, client centric (34)](https://resources.model-office.co.uk/topic/benchmark-compliance-client-centric)
- [consumer duty (34)](https://resources.model-office.co.uk/topic/consumer-duty)
- [Human resource development (33)](https://resources.model-office.co.uk/topic/human-resource-development)
- [Fitbit (28)](https://resources.model-office.co.uk/topic/fitbit)
- [governance (18)](https://resources.model-office.co.uk/topic/governance)
- [resilience (17)](https://resources.model-office.co.uk/topic/resilience)
- [HRD (13)](https://resources.model-office.co.uk/topic/hrd)
- [cyberrisk (13)](https://resources.model-office.co.uk/topic/cyberrisk)
- [Modeldrivenmachineexecutablerporting (9)](https://resources.model-office.co.uk/topic/modeldrivenmachineexecutablerporting)
- [PII (9)](https://resources.model-office.co.uk/topic/pii)
- [auto advice (7)](https://resources.model-office.co.uk/topic/auto-advice)
- [closed-source (7)](https://resources.model-office.co.uk/topic/closed-source)
- [open-source (7)](https://resources.model-office.co.uk/topic/open-source)
- [streamlined advice (7)](https://resources.model-office.co.uk/topic/streamlined-advice)
- [mifid (6)](https://resources.model-office.co.uk/topic/mifid)
- [Soft compliance (5)](https://resources.model-office.co.uk/topic/soft-compliance)
- [appointed representative (5)](https://resources.model-office.co.uk/topic/appointed-representative)
- [BREXIT (4)](https://resources.model-office.co.uk/topic/brexit)
- [GRC (4)](https://resources.model-office.co.uk/topic/grc)
- [levies (4)](https://resources.model-office.co.uk/topic/levies)
- [COVID19 (3)](https://resources.model-office.co.uk/topic/covid19)
- [Pandemic (3)](https://resources.model-office.co.uk/topic/pandemic)
- [Roboadvice (3)](https://resources.model-office.co.uk/topic/roboadvice)
- [artificial intelligence (3)](https://resources.model-office.co.uk/topic/artificial-intelligence)
- [ESG (2)](https://resources.model-office.co.uk/topic/esg)
- [Endowment-theory (2)](https://resources.model-office.co.uk/topic/endowment-theory)
- [FCAbusinessplan (2)](https://resources.model-office.co.uk/topic/fcabusinessplan)
- [Finovate (2)](https://resources.model-office.co.uk/topic/finovate)
- [IDD (2)](https://resources.model-office.co.uk/topic/idd)
- [Systems and controls (2)](https://resources.model-office.co.uk/topic/systems-and-controls)
- [Analytics (1)](https://resources.model-office.co.uk/topic/analytics)
- [Back Office (1)](https://resources.model-office.co.uk/topic/back-office)
- [CIP (1)](https://resources.model-office.co.uk/topic/cip)
- [Consumerduty (1)](https://resources.model-office.co.uk/topic/consumerduty)
- [FCA papers (1)](https://resources.model-office.co.uk/topic/fca-papers)
- [Horizon scan (1)](https://resources.model-office.co.uk/topic/horizon-scan)
- [Luddite (1)](https://resources.model-office.co.uk/topic/luddite)
- [Mansion house speech (1)](https://resources.model-office.co.uk/topic/mansion-house-speech)
- [NVIDIA (1)](https://resources.model-office.co.uk/topic/nvidia)
- [Pension transfer (1)](https://resources.model-office.co.uk/topic/pension-transfer)
- [Service Proposition (1)](https://resources.model-office.co.uk/topic/service-proposition)
- [ThomsonReuters, (1)](https://resources.model-office.co.uk/topic/thomsonreuters)
- [algorithm (1)](https://resources.model-office.co.uk/topic/algorithm)
- [appointedrepresentatives (1)](https://resources.model-office.co.uk/topic/appointedrepresentatives)
- [backoffice (1)](https://resources.model-office.co.uk/topic/backoffice)
- [boundary (1)](https://resources.model-office.co.uk/topic/boundary)
- [consumer\_duty (1)](https://resources.model-office.co.uk/topic/consumer_duty)
- [intuition (1)](https://resources.model-office.co.uk/topic/intuition)
- [karate (1)](https://resources.model-office.co.uk/topic/karate)

see all

### Posts by Topic

- [Financial regulation (143)](https://resources.model-office.co.uk/topic/financial-regulation)
- [Risk management (143)](https://resources.model-office.co.uk/topic/risk-management)
- [regtech (143)](https://resources.model-office.co.uk/topic/regtech)
- [FCA (142)](https://resources.model-office.co.uk/topic/fca)
- [practice management (142)](https://resources.model-office.co.uk/topic/practice-management)
- [fintech (135)](https://resources.model-office.co.uk/topic/fintech)
- [Financial business development (116)](https://resources.model-office.co.uk/topic/financial-business-development)
- [HMT (103)](https://resources.model-office.co.uk/topic/hmt)
- [Data (101)](https://resources.model-office.co.uk/topic/data)
- [advice (100)](https://resources.model-office.co.uk/topic/advice)
- [suitability (91)](https://resources.model-office.co.uk/topic/suitability)
- [MiFIDII (85)](https://resources.model-office.co.uk/topic/mifidii)
- [FAMR (84)](https://resources.model-office.co.uk/topic/famr)
- [FAWG (79)](https://resources.model-office.co.uk/topic/fawg)
- [AI (77)](https://resources.model-office.co.uk/topic/ai)
- [Culture (74)](https://resources.model-office.co.uk/topic/culture)
- [GDPR (74)](https://resources.model-office.co.uk/topic/gdpr)
- [Risk, (74)](https://resources.model-office.co.uk/topic/risk)
- [Enforcement (73)](https://resources.model-office.co.uk/topic/enforcement)
- [supervision (72)](https://resources.model-office.co.uk/topic/supervision)
- [audit (70)](https://resources.model-office.co.uk/topic/audit)
- [client engagement (69)](https://resources.model-office.co.uk/topic/client-engagement)
- [Conduct (68)](https://resources.model-office.co.uk/topic/conduct)
- [Chatbot (67)](https://resources.model-office.co.uk/topic/chatbot)
- [Accountability (60)](https://resources.model-office.co.uk/topic/accountability)
- [Platforms (59)](https://resources.model-office.co.uk/topic/platforms)
- [PROD (57)](https://resources.model-office.co.uk/topic/prod)
- [Product governance (57)](https://resources.model-office.co.uk/topic/product-governance)
- [Regulatory (56)](https://resources.model-office.co.uk/topic/regulatory)
- [Reporting (56)](https://resources.model-office.co.uk/topic/reporting)
- [digital, (56)](https://resources.model-office.co.uk/topic/digital)
- [SMCR (51)](https://resources.model-office.co.uk/topic/smcr)
- [compliance (36)](https://resources.model-office.co.uk/topic/compliance)
- [Constructive compliance (35)](https://resources.model-office.co.uk/topic/constructive-compliance)
- [Benchmark, compliance, client centric (34)](https://resources.model-office.co.uk/topic/benchmark-compliance-client-centric)
- [consumer duty (34)](https://resources.model-office.co.uk/topic/consumer-duty)
- [Human resource development (33)](https://resources.model-office.co.uk/topic/human-resource-development)
- [Fitbit (28)](https://resources.model-office.co.uk/topic/fitbit)
- [governance (18)](https://resources.model-office.co.uk/topic/governance)
- [resilience (17)](https://resources.model-office.co.uk/topic/resilience)
- [HRD (13)](https://resources.model-office.co.uk/topic/hrd)
- [cyberrisk (13)](https://resources.model-office.co.uk/topic/cyberrisk)
- [Modeldrivenmachineexecutablerporting (9)](https://resources.model-office.co.uk/topic/modeldrivenmachineexecutablerporting)
- [PII (9)](https://resources.model-office.co.uk/topic/pii)
- [auto advice (7)](https://resources.model-office.co.uk/topic/auto-advice)
- [closed-source (7)](https://resources.model-office.co.uk/topic/closed-source)
- [open-source (7)](https://resources.model-office.co.uk/topic/open-source)
- [streamlined advice (7)](https://resources.model-office.co.uk/topic/streamlined-advice)
- [mifid (6)](https://resources.model-office.co.uk/topic/mifid)
- [Soft compliance (5)](https://resources.model-office.co.uk/topic/soft-compliance)
- [appointed representative (5)](https://resources.model-office.co.uk/topic/appointed-representative)
- [BREXIT (4)](https://resources.model-office.co.uk/topic/brexit)
- [GRC (4)](https://resources.model-office.co.uk/topic/grc)
- [levies (4)](https://resources.model-office.co.uk/topic/levies)
- [COVID19 (3)](https://resources.model-office.co.uk/topic/covid19)
- [Pandemic (3)](https://resources.model-office.co.uk/topic/pandemic)
- [Roboadvice (3)](https://resources.model-office.co.uk/topic/roboadvice)
- [artificial intelligence (3)](https://resources.model-office.co.uk/topic/artificial-intelligence)
- [ESG (2)](https://resources.model-office.co.uk/topic/esg)
- [Endowment-theory (2)](https://resources.model-office.co.uk/topic/endowment-theory)
- [FCAbusinessplan (2)](https://resources.model-office.co.uk/topic/fcabusinessplan)
- [Finovate (2)](https://resources.model-office.co.uk/topic/finovate)
- [IDD (2)](https://resources.model-office.co.uk/topic/idd)
- [Systems and controls (2)](https://resources.model-office.co.uk/topic/systems-and-controls)
- [Analytics (1)](https://resources.model-office.co.uk/topic/analytics)
- [Back Office (1)](https://resources.model-office.co.uk/topic/back-office)
- [CIP (1)](https://resources.model-office.co.uk/topic/cip)
- [Consumerduty (1)](https://resources.model-office.co.uk/topic/consumerduty)
- [FCA papers (1)](https://resources.model-office.co.uk/topic/fca-papers)
- [Horizon scan (1)](https://resources.model-office.co.uk/topic/horizon-scan)
- [Luddite (1)](https://resources.model-office.co.uk/topic/luddite)
- [Mansion house speech (1)](https://resources.model-office.co.uk/topic/mansion-house-speech)
- [NVIDIA (1)](https://resources.model-office.co.uk/topic/nvidia)
- [Pension transfer (1)](https://resources.model-office.co.uk/topic/pension-transfer)
- [Service Proposition (1)](https://resources.model-office.co.uk/topic/service-proposition)
- [ThomsonReuters, (1)](https://resources.model-office.co.uk/topic/thomsonreuters)
- [algorithm (1)](https://resources.model-office.co.uk/topic/algorithm)
- [appointedrepresentatives (1)](https://resources.model-office.co.uk/topic/appointedrepresentatives)
- [backoffice (1)](https://resources.model-office.co.uk/topic/backoffice)
- [boundary (1)](https://resources.model-office.co.uk/topic/boundary)
- [consumer\_duty (1)](https://resources.model-office.co.uk/topic/consumer_duty)
- [intuition (1)](https://resources.model-office.co.uk/topic/intuition)
- [karate (1)](https://resources.model-office.co.uk/topic/karate)

see all

### Recent Posts

#### About Us

Model Office is a RegTech platform that ensures you know you comply with the regulations and provides instant data to show how you stand against the rules and your peers and provides tailored tasks, templates and resources for you to continually improve professional practice, reduce compliance costs and time.

#### More Links

- [\[fa icon="caret-right"\] Home](https://www.model-office.co.uk)
- [\[fa icon="caret-right"\] Blog](https://resources.model-office.co.uk)
- [\[fa icon="caret-right"\] About Us](https://www.model-office.co.uk)

#### Contact Us

\[fa icon="phone"\]  02030055305

\[fa icon="envelope"\]  [info@model-office.co.uk](mailto:info@model-office.co.uk)

\[fa icon="home"\]  71-75 Shelton Street, Covent Garden, London WC2H9JQ

\[fa icon="[linkedin-square"](https://www.linkedin.com/company/33280999/admin/feed/posts/)\]Linkedin \[fa icon="twitter-square"\]Twitter Pinterest

 Copyright 2026 | Designed with \[fa icon="heart"\] by [HubSpot](https://www.hubspot.com)

\[fa icon="chevron-up"\]Back to top