Third Line of Defence (Independent Assurance: Internal Audit and External Audit) – responsible for providing assurance on the effectiveness of governance, Risk Management and internal controls, including the manner in which the first and second lines of defence perform their Risk Management and control objectives.