Skip to content
GovernanceInternational

IIA Three Lines Model (2020)

What is IIA Three Lines Model (2020)?

The IIA's principles-based model for organising governance roles: what the governing body, management (which carries first-line and second-line work), internal audit (the third line) and external assurance providers each contribute, how they stay independent yet aligned, and how together they create and protect value. It comprises 12 controls organised across 2 domains, and applies in International.

Map this against the frameworks you already hold

The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.

Browse the framework graph →

Where IIA Three Lines Model (2020) overlaps with the standards you already hold

IIA Three Lines Model (2020) vs ISO 27001:2022View comparison →IIA Three Lines Model (2020) vs SOC 2View comparison →IIA Three Lines Model (2020) vs NIST CSF 2.0View comparison →IIA Three Lines Model (2020) vs GDPRView comparison →IIA Three Lines Model (2020) vs HIPAAView comparison →IIA Three Lines Model (2020) vs PCI DSS 4.0View comparison →

What IIA Three Lines Model (2020) means in your sector

IIA Three Lines Model (2020) for Healthcare→IIA Three Lines Model (2020) for Financial Services→IIA Three Lines Model (2020) for Technology→IIA Three Lines Model (2020) for Government→IIA Three Lines Model (2020) for Manufacturing→IIA Three Lines Model (2020) for Energy→IIA Three Lines Model (2020) for Retail→IIA Three Lines Model (2020) for Education→

What IIA Three Lines Model (2020) means for your job

IIA Three Lines Model (2020) for CISOs→IIA Three Lines Model (2020) for Compliance Officers→IIA Three Lines Model (2020) for Risk Managers→IIA Three Lines Model (2020) for IT Directors→IIA Three Lines Model (2020) for DPOs→IIA Three Lines Model (2020) for Auditors→

Questions people ask about IIA Three Lines Model (2020)

What is IIA Three Lines Model (2020)?
The IIA's principles-based model for organising governance roles: what the governing body, management (which carries first-line and second-line work), internal audit (the third line) and external assurance providers each contribute, how they stay independent yet aligned, and how together they create and protect value.
How many controls does IIA Three Lines Model (2020) have?
IIA Three Lines Model (2020) contains 12 controls organized across 2 domains.
Where does IIA Three Lines Model (2020) apply?
IIA Three Lines Model (2020) applies in International. Organizations operating in or serving customers in this jurisdiction should check whether its requirements reach them.
Which version of IIA Three Lines Model (2020) is covered here?
This page covers The IIA's Three Lines Model, July 2020 (position paper; print updated September 2024).

Query IIA Three Lines Model (2020) programmatically

IIA Three Lines Model (2020), its 12 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.

IIA Three Lines Model (2020) API reference and MCP config →

How ready are you for IIA Three Lines Model (2020)?

Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.

Get Your Readiness Report, from $49Explore Platform Free
Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .