← Back to topic library
Responsible Tech MaxxingIntermediateRisk Management60 sec
Risk owner
A risk owner is the specific person responsible for tracking a given risk, ensuring its controls stay effective, and escalating if it changes.
Prerequisite: Algorithmic impact assessment
What matters
A risk with no assigned owner tends to get forgotten as priorities shift, since no single person is accountable for revisiting or acting on it.
Example
A risk register entry might name a specific engineering lead as the risk owner responsible for monitoring a known model weakness going forward.
Common misconception
A risk owner is not necessarily the person who caused or discovered the risk; it's whoever is designated to actively manage it going forward.
Recall question
What tends to happen to a risk that has no assigned owner?
Keywords and related concepts
risk owneraccountabilityrisk managementrisk register