That is, they are responsible for achieving compliance in their business lines and suffer the consequences in the event of compliance failures or missteps.
Business line managers convert the corporate compliance risk standards or objectives into policies and procedures tailored to the specific type and level of compliance risk inherent in their activities and to the specific laws of the jurisdictions in which they operate. To create appropriate compliance risk controls, organizations seek first to understand compliance risk across the entire entity.