Risk owner: An individual or entity that is responsible for managing a particular risk. This includes monitoring the risk, implementing controls to mitigate it, and taking appropriate action if the risk materializes. Assigning a risk owner ensures accountability and improves the effectiveness of risk management activities within an organization.
Categories: CC D1: Security Principles | CCSP D6: Legal - Risk and Compliance | CISM D2: Information security risk management | CISSP D1: Security and Risk Management | Security+ D5: Security Program Management and Oversight | SSCP D3: Risk Identification Monitoring and Analysis
« Back to Glossary Index