Every risk needs an owner, and every control needs an owner, but they are usually not the same person. Getting ownership right is one of the most tested ideas in CISM because it decides who makes which decisions. When ownership is unclear, risks drift without treatment and controls decay without anyone noticing.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 6 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.