Skip to main content

Risk owner

The single named person accountable for a given risk, with the authority and resources to act on it. A committee cannot be an owner; shared ownership means the risk falls through the gaps between functions.

Defined in 2 GAGE programs, which carry 3 distinct definitions of it. The wording above is taught in Certified AI Transformation Professional (CATP).

How each discipline defines it

The same term does different work depending on who is using it. These are the definitions as each program teaches them, unedited.

Certified AI Transformation Professional (CATP)

The single named person accountable for a given risk, with the authority and resources to act on it. A committee cannot be an owner; shared ownership means the risk falls through the gaps between functions.

Certified Enterprise Governance, Risk and Compliance Professional (CEGP)

The person accountable for a named risk remaining within tolerance, identified by the authority test: can this person change the exposure without asking anyone?

Certified Enterprise Governance, Risk and Compliance Professional (CEGP)

In ISO 31000:2018, a person or entity with the accountability and authority to manage a risk. Both nouns are required.

Where it is taught

The exact lessons this term appears in. The first module of every program is free with a free account.

  • AI Risk Management · Governance and Responsible AI, Certified AI Transformation Professional (CATP)

Terms it appears with

Not an alphabetical neighbourhood: these are the terms taught in the same lessons, ranked by how often they appear together.