Forty-Sixth Report Government preparedness for the COVID-19 pandemic: lessons for government on risk

On the basis of a Report by the Comptroller and Auditor General, we took evidence from the Cabinet Office and the Department of Health & Social Care (the Department) on the government’s preparedness for the COVID-19 pandemic.1

The three lines of defence model of risk management, widely used in the private sector, sets out what the Orange Book characterises as a “simple and effective way to help delegate and coordinate risk management roles and responsibilities within and … Read more The three lines of defence model of risk management, widely used in the private sector, sets out what the Orange Book characterises as a “simple and effective way to help delegate and coordinate risk management roles and responsibilities within and across the organisation”.8 Under the first line of defence, management has primary ownership, responsibility and accountability for identifying, assessing and managing risks. The second line of defence consists of functions, such as organisations’ risk and compliance teams, that monitor and facilitate the implementation of effective risk management practices and facilitate risk reporting. Internal audit forms the third line of defence. The Cabinet Office expressed support for the three lines of defence model and told us that it plans to carry out a pilot in 2022 to strengthen the third line of defence by introducing audits or assessments of departments’ planning for emergencies.9 Show less