CRISC: Certified in Risk and Information Systems Control

The business process owner is accountable for the process and has the authority to ensure that risks arising from control gaps are assessed and appropriately treated. Control, security, and operational-risk roles may support oversight and remediation, but they do not ordinarily own the underlying business-process risk.