AI Reports · GovAI (Oxford) · 2026-10-17 · Policy position
AI Lab Policy Three Lines of Defense Against Risks from AI October 2023 Jonas Schuett Organizations that develop and deploy artificial intelligence (AI) systems need to manage the associated risks—for
Organizations developing and deploying AI must manage the associated risks, but it is often unclear who is responsible. This article suggests how AI companies could implement the three lines of defense (3LoD) model, a risk management framework widely regarded as best practice in many industries. It argues the model could close gaps in risk coverage, improve the effectiveness of risk management, and help boards oversee management more effectively.