The Institute of Internal Auditors has updated its Three Lines of Defense Model to emphasize more active forms of risk management and governance that go beyond merely defensive moves by the internal ...