Risk Governance Ecosystem in Information Communications Technology Industry using the Three Lines of Defense (3LOD) Framework Approach in the Philippines

Several frameworks have been developed to ensure organizational compliance and resilience amid the increasing complexity of risks in the Information and Communication Technology (ICT) industry. This study explores the risk governance ecosystem of the Philippine ICT sector through the lens of the Three Lines of Defense (3LOD) framework, which comprises operational management, risk oversight, and independent assurance. These components are known for offering a structured approach to risk management and internal control. Using a quantitative research design, data were collected from 225 ICT professionals in the National Capital Region (NCR), including compliance officers, risk managers, financial executives, and internal auditors. The study examined the extent to which risk culture, regulatory environment, and ICT infrastructure influence the implementation of the 3LOD framework. Descriptive findings revealed that all three predictors were perceived to have a “very high effect,” with ICT infrastructure (????̄ = 3.53) ranking highest in its perceived influence. However, inferential analysis showed that ICT infrastructure had the most significant effect across all 3LOD components operation management (β = 0.4861, p = 0.003), risk management and compliance (β = 0.6449, p