What is a risk owner?

• A. The sponsor who funds risk responses.
• B. The person responsible for implementing a risk response and monitoring the risk.
• C. The risk auditor who reviews risk files.
• D. The quality assurance specialist ensuring risk quality.

Answer: (B)

In risk management, a risk owner is the person accountable for acting on a risk and keeping it under control. This role is responsible for implementing the chosen risk responses and for ongoing monitoring of the risk—watching triggers, assessing whether the response is reducing risk as intended, updating the risk register, and escalating if the risk status changes. The owner coordinates with the team to ensure actions are carried out and resources are available, and they remain accountable for the risk within their area of responsibility. The sponsor provides funding and support for risk responses, but does not necessarily implement them day to day. A risk auditor reviews risk documentation and processes, not the execution of responses. A quality assurance specialist focuses on process quality and ensuring risk-related quality, not owning the risk and its response actions.