A risk mitigation plan should include a 'risk owner.' What is the PRIMARY responsibility of a risk owner?
-
A
Approving the annual risk budget
-
B
Accountable for implementing and monitoring controls for an assigned risk
-
C
Auditing all controls across the organization
-
D
Reporting risks directly to external regulators