Map the following terms to their location in the three lines of defense model shown in the accompanying figure.

The IIA's Three Lines Model

A

Term

Location

Second line of defense

Board of directors

Managing risk

External audit

Regulators

Support on risk$-$related matters

Third line of defense

Internal Audit

Risk Management and compliance

First line of defense

Management

Independent advice