QuestionQ498

Governance

A risk owner should be the individual accountable for:

  • A implementing actions
  • B managing controls
  • C the risk management process
  • D the business process
Explanation

Risk ownership belongs with the person accountable for the affected business process, because that person has the authority and responsibility to accept, treat, monitor, or escalate risks arising from that process.

Community Discussion

No comments yet. Be the first to start the discussion!