The IIA publishes updated Statements of Position

The Institute of Internal Auditors (IIA) has released two updated Statements of Position: The Three Lines Model and The Role of the Internal Audit Function in Enterprise Risk Management (ERM).

Issued on behalf of The IIA's Global Board of Directors, these publications present a modern governance framework that reflects today's organisational structures, evolving risk environments and varying levels of organisational maturity.

The updated Three Lines Model explains how assurance and advisory activities across all three lines contribute to effective board oversight and informed management decision-making. It also highlights the unique role of the Chief Audit Executive in helping organisations coordinate a holistic approach to governance, risk management and assurance.

The accompanying Statement on The Role of the Internal Audit Function in ERM clarifies that Enterprise Risk Management consists of a set of activities to which internal audit can contribute. It also explains under which safeguards internal audit may perform certain ERM-related activities without assuming management's decision-making responsibilities.

Both Statements place strong emphasis on collaboration, coordination and reliance between providers of assurance and advisory services. At the same time, they reaffirm that the independence of the internal audit function remains essential for providing objective assurance and enhancing the reliability of information available to boards and management.

The new publications replace the previous Position Papers issued in 2024 and 2009. They also introduce updated visual models that replace the former Three Lines graphic and the ERM "fan" diagram.

The Statements of Position are now available via the IIA and can also be accessed through the Vaktechnische publicaties section on the IIA Nederland website.