Investment management risk is evolving from the accountability of the CIO to more traditional risk management techniques - including the application of the 3 lines of defence. This paper reconciles traditional perspectives and emerging trends.