The Bank also employs a “three lines of defence” model to describe the role of business segments (First Line), governance, risk, and oversight functions, such as Risk Management and Legal and Regulatory Compliance functions (Second Line), and Internal Audit (Third Line) in managing risk across TD.