In this week’s Performer Profile, Grant Lowen, the executive general manager of group audit at Commonwealth Bank of Australia talks about the company’s “three layers of defense” model for risk and control governance. Lowen reports that this model was developed as a joint effort with risk management to define accountabilities. This week’s question asks: Does your company employ a similar model to evaluate company risks and governance practices?