Webinar – Leading from the Top: Maximizing the Three Lines of Defense for Risk Management Program Success

April 14, 2022
10:00am - 11:00am Pacific Time
CHI Owner Risk Management


Risk leaders are well-positioned to identify and help align resources across the Three Lines of Defense, a model that addresses specific duties related to risk management and internal control. This allows the organization to prevent duplication of efforts, maximize resiliency, encourage transparency, and respond to an increasingly complex healthcare business environment.

Everyone in the organization has a role in managing risk from day-to-day ownership of operations, to programmatic oversight, to checks-and-balances for compliance. The Three Lines of Defense model differentiates the responsibilities that should be expected from each function.

Most organizations have a strength or weakness in one or more lines of defense which may adversely impact the risk profile of the organization. The risk management leader has the opportunity to identify these weaknesses and leverage the strengths. The goal of this program is to discuss the Three Lines of Defense model, its alignment with the COSO ERM framework, and to prepare the risk manager to analyze the capabilities of each function to maximize risk management program success.

Register Here

Learning Objectives

By the end of the webinar, the participant should be able to: 

  1. Distinguish between the three lines of defense as part of a successful risk management program.
  2. Perform a SWOT analysis of their organization’s three lines of defense.
  3. Execute two strategies to leverage the strength of each line of defense as part of a mature ERM program.

Provider approved by the California Board of Registered Nursing, Provider number 12205 for 1 contact hour.


President, Healthcare Risk and Safety Strategies, LLC

Enterprise Risk Officer,  Beth Israel Lahey Health


Ann Gaffey – Ms. Gaffey is the President of Healthcare Risk and Safety Strategies. She is an industry-recognized career risk management, quality and patient safety professional with over thirty years of experience in healthcare, having served as the 2016 President of the American Society for Healthcare Risk Management. Ann provides innovative consultative services to healthcare organizations across the care continuum to develop, improve and enhance enterprise risk management programs and patient safety programs with emphasis on risk identification, assessment, analysis and prevention as well as risk management and patient safety education.
Ms. Gaffey has acute care risk management experience, with responsibilities including managing self-insurance and captive insurance programs, insurance purchasing, liability claims management, and traditional risk assessment and mitigation activities.
Ann is a frequent national speaker on topics related to risk reduction and management strategies in healthcare, enterprise risk management, and leadership. Ann has authored articles in the Journal of Healthcare Risk Management, co-authored in the Risk Management Handbook for Healthcare Organizations, 6th edition, Healthcare Risk Management Fundamentals, and authored in other publications.
In addition to her work with ASHRM and affiliated state chapters, Ann’s involvement includes:
• 2019 Visiting Expert, Ministry of Health, Singapore
• Technical Expert, Agency for Healthcare Research and Quality (AHRQ), Making Health Care Safer III Technical Expert Panel
• Society to Improve Diagnosis in Medicine (SIDM), Board Member (2020-2022)
• Coalition to Improve Diagnosis Advisory Task Force (2015-2020); Member, Advisory Council (2019-Present)
• National Coordinating Council for Medication Error Reporting and Prevention (NCC MERP) (2008-present); Vice-Chairperson (July 2011-December 2015, Present)
• National Perinatal Information Center, Board Member (2014-present), Chair (2019-2020)
• Association for the Advancement of Medical Instrumentation (AAMI), Committee on Best Practices for Selecting and Purchasing Complex Technology, Member (2017 – present)
• National Transitions of Care Coalition, Advisory Task Force Member (2008-2014)
Ms. Gaffey received her degree from the University of Virginia with a Bachelor of Science in Nursing. She also received her Master of Science in Nursing Leadership and Management from The George Washington University. Ann has achieved the CPHRM and DFASHRM designations and was awarded the ASHRM Distinguished Service Award in 2020. She currently serves as Faculty for the ASHRM Healthcare Risk Management Certificate Course and the Enterprise Risk Management Certificate Course, and previously served as adjunct faculty for the School of Nursing at The George Washington University.


Barbara McCarthy – Barb is Enterprise Risk Officer at Beverly Hospital, a member of Beth Israel Lahey Health, in Beverly Massachusetts.   She is a resource for risk prevention and control for acute care, inpatient behavioral health, and insured physician practices.  She supports the medical malpractice program & is a resource for the compliance, privacy, & safety programs.  Barb received a diploma in Nursing from New England Deaconess Hospital School of Nursing in Boston, a BSN from Northeastern University, and an MPH from Boston University.  Past roles include critical care and inpatient nursing management; performance improvement, infection control, safety, privacy, & employee health leadership as well as Joint Commission coordination.   Barb has been an active member of both state & national risk management associations for 18 years & was Massachusetts state chapter president in 2009.  She was a member of the (American Society for Healthcare Risk Management (ASHRM) board and deputy-chair of the Enterprise Risk Management (ERM) Task Force and is an ERM faculty member.  Most recently, Barb was ASHRM Risk Manager of the Year 2020 & Massachusetts Risk Manager of the Year 2021.  She is currently the ASHRM President for 2022.  Barb is also the vice-chair of the Rockport Board of Health.


Web Access

Zoom connection information is auto-generated and emailed to the participant upon registration.  Each participant has a unique link for connection.


Zoom connection information is auto-generated and emailed to the participant upon registration.  Each participant has a unique link for connection.