Our exploratory study considers whether the internal audit function is an efficient "third line of defense" for risk management and control as proposed by The Institute of Internal Auditors. To that ...