The second line of defense is risk management and compliance units, which are responsible for the planning, assessment, and supervision of risk management mechanisms as well as giving recommendations.