Cyber risk management, a 3 lines of defence approach provides for risk management, risk oversight and risk control.