Who should be responsible for approving the cost of controls to be implemented for mitigating risk?
Risk practitioner
Risk owner
Control owner
Control implementer
Submit