Risk and other corporate support functions (for example, Human Resources and Legal departments) serve as the second line of defense and are responsible for providing guidance, oversight and appropriate challenge to the first line of defense.