CRISC: Certified in Risk and Information Systems ControlDemo

A risk treatment plan needs an accountable owner to ensure that treatment actions are implemented, monitored, and escalated as needed. Without ownership, the plan may not be executed regardless of its schedule, justification, or technical detail.