Enhancements include a revised approach to the implementation Risk Appetite concept and the adoption of the Three Lines of Defense Model – a framework designed to facilitate an effective risk management system that clarified roles of management, various risk control and compliance oversight functions, and Internal Audit.