Unravelling the Three Lines Model in Cybersecurity: A Systematic Literature Review

The Three Lines of Defence model (based on defence‑in‑depth approaches) has become one of the primary risk management frameworks. Yet, its application in the cybersecurity space, one of the fastest‑growing areas of risk for modern organisations, has been fragmented at best. In this article, we conducted a systematic literature review on the application of this model in cybersecurity.