The Risk Management function and Compliance function should be involved in the establishment of  3  the framework. This to ensure that all material risks are considered, and that the financial institution complies with all requirements. The Code uses the ‘three lines of defense’ model in identifying the functions responsible for addressing and managing risks.
4/4  BIS - Central bankers' speeches