Implementing the Three Lines of Defense into Your CMS