Which of the following is the PRIMARY risk management responsibility of the third line of defense? Providing assurance of the effectiveness of risk management activities Providing benchmarking on other organizations risk management programs Providing advisory services on enterprise risk management (ERM) Providing guidance on the design of effective controls