The recent financial crisis has exposed a need to strengthen the risk management process in financial institutions. Part of these efforts is redesigning the risk management framework. What are the three lines of defense in effective risk management and how do we distinguish among their functions? How do they help manage the risk throughout the organization?