Risk Management Climate change scenarios and our insurance operations I. Identifying and assessing climate risks AIA’s risk governance framework is built on the ‘Three Lines of Defence’ model which clearly defines roles and responsibilities for the management of risk between Executive Management in the First Line, Risk and Compliance in the Second Line, and Internal Audit in the Third Line.