The third line of defence should $...$

Select one:

a$.$

validate processes in the risk management framework.

b$.$

develop centralised policies and standards.

c$.$

promote a strong risk culture.

d$.$

monitor and report on risk.