Combined Assurance
Second Line Functions Coverage
Reach and capacity of second-line oversight functions such as risk, compliance and SCM oversight.
Why second-line capacity determines oversight strength
Second-line functions such as risk management, compliance and supply chain oversight are meant to challenge and support the first line, but they can only do so if their reach and capacity match the institution's risk profile. Under-resourced second-line functions create silent gaps that the AGSA and the audit committee eventually find the hard way. AuditPro Core measures second-line reach and capacity so leadership can see whether oversight is stretched too thin.
The Numbers
AuditPro Core renders this view from your tenant's live, tamper-evident records. The figures below are illustrative sample data.
Oversight functions
6
Adequately resourced
3
50%
Coverage of risks
68%
▲ 4%
Vacancy rate
21%
▲ 3%
Risk coverage by second-line function
Second-line capacity
| Function | Posts | Filled | Coverage % |
|---|---|---|---|
| Risk management | 8 | 7 | 78 |
| Compliance | 6 | 4 | 71 |
| SCM oversight | 9 | 6 | 62 |
| Health & safety | 5 | 4 | 58 |
| Information governance | 4 | 3 | 64 |
Figures shown are illustrative sample data for demonstration. AuditPro Core renders these views from your own tenant's live, tamper-evident records.
The second line
Second-line functions set policy, monitor and challenge the first line without owning the operational risk themselves. They sit between operations and independent audit.
Reach
Reach is how much of the institution a function actually covers. A compliance function nominally responsible for everything but present only in head office has limited real reach.
Capacity
Capacity is whether the function has the people, skills and tools to discharge its mandate. A mandate without capacity is oversight in name only.
Coverage gaps
Where reach or capacity falls short of the risk profile, oversight gaps form. These gaps quietly shift assurance burden onto audit and onto the accounting officer.
How AuditPro Core Bridges the Gap
- Coverage measurement: the reach of each second-line function is mapped against the risk universe.
- Capacity view: the platform compares mandate against resourcing to expose stretched functions.
- Exception workflow: material oversight gaps are flagged for capacity or scope decisions.
- Audit-ready export: the coverage picture supports combined assurance reporting to the committee.
Key Takeaways
- Second-line functions only add value where reach matches the risk profile.
- A mandate without capacity is oversight in name only.
- Under-resourced second lines create silent assurance gaps.
- Stretched oversight quietly shifts burden onto audit and the accounting officer.
See This on Your Own Data
AuditPro Core renders this dashboard from your tenant's live, tamper-evident records — every figure traceable to source.