My board has confirmed that the responsibilities for risks from each of the following “lines” are well defined: Management team and business personnel who are risk owners (Line 1); independent risk and compliance function (Line 2); and the internal audit division (Line 3) are well defined.