The magnitude of risk taking that was revealed by the financial crisis has led to increased attention being placed on risk culture and governance of financial institutions. The “three lines of defense” model is often used in risk management, with the second line (independent controls)...