The effectiveness of Internal Control over Financial Reporting (ICFR) has become increasingly important in emerging markets, where regulatory environments continue to evolve and governance mechanisms are often characterised by varying levels of institutional maturity. Despite the growing adoption of the three lines of defence (3LOD) model as a governance and risk management framework, limited empirical evidence has been provided regarding its effectiveness in strengthening financial reporting controls, particularly within developing economies. This study investigates the extent to which the implementation and operational maturity of the 3LOD—management and operational controls (first line), risk management and compliance functions (second line), and internal audit activities (third line)—contribute to ICFR effectiveness among companies listed on the Nigerian Exchange Group (NGX). The analysis is grounded in agency theory, institutional theory, and the Committee of Sponsoring Organizations of the Treadway Commission (COSO) Internal Control–Integrated Framework. A mixed-methods research design was adopted. Quantitative evidence was obtained from structured questionnaires administered to 376 governance professionals, including chief financial officers, risk managers, internal auditors, and audit committee members from 94 listed companies, while qualitative insights were derived from 18 semi-structured interviews with senior governance practitioners. In addition, archival evidence was collected from annual reports and audited financial statements covering the period from 2019 to 2024. The findings indicate that comprehensive implementation of the 3LOD model is positively and significantly associated with ICFR effectiveness (β = 0.576, p < 0.01). Among the individual lines of defence, the strongest contribution is attributed to the third line (internal audit) (β = 0.284, p < 0.01), followed by the second line (risk management and compliance) (β = 0.198, p < 0.01) and the first line (management and operational controls) (β = 0.130, p < 0.05). A significant synergistic effect is also observed, as interaction among the three lines enhances ICFR effectiveness beyond their individual contributions (β = 0.156, p < 0.01). Furthermore, board oversight is found to strengthen the relationship between 3LOD implementation and ICFR effectiveness. The qualitative findings corroborate the statistical results, highlighting the critical importance of internal audit independence, the uneven maturity of second-line functions, and the governance role of audit committees. By providing robust evidence from a major African capital market, the study extends the literature on governance-based control systems and offers practical implications for regulators, boards of directors, and corporate governance practitioners seeking to improve financial reporting quality and organisational accountability in emerging market environments.