CEO who
assumes ownership of all the risks the enterprise is exposed to and reports to the Board of Directors.
However, ownership of the individual, sectional, team, or departmental risks are associated with the
staff/team/committee in charge of the processes or functions where the risks arise.