Business managers who are responsible for establishing an appropriate risk and control environment are the first line of defence against risk exposure in an organisation. Risk management, which is regarded as the second line of defence, involves oversight over business processes and risks and the implementation of adequate risk policies and procedures. Discuss the third line of defence of an organisation against risk exposure in detail.