The third line’s key responsibility is to assess whether the first- and second-line functions are operating effectively; it is the duty of reporting to the board and audit committee, in addition to assuring regulators and external auditors that the control culture across the organisation is influential in its design and operation.