The elements of the governance structure – the internal control system, the compliance and risk management system, and Internal Audit – work together according to the internally recognized “Three Lines of Defense Model”.