MetLife operates under the “Three Lines of Defense” model, which designates business and functional owners as the first and primary line of defense in identifying, measuring, monitoring, managing, and reporting risks.