Who is accountable for the process when an IT stakeholder operates a key control to address a risk scenario?
Data custodian
Risk owner
System owner
IT manager
The risk owner is accountable for managing risk, including overseeing controls addressing identified risk scenarios, regardless of who operates them.
Submit