During the risk assessment process, the Risk Team assigns risks to users in the Risk Owner & Delegate user group. Users in this group are responsible for:
- Assessing risks and documenting the controls the organization has in place;
- Reviewing the issues and corrective actions for their assigned risks ; and
- Ensuring that key metrics such as KRI, incident, and loss event data, are up-to-date for their assigned risks.
Risk owners and their delegates have access to the Portal application only, unless they are assigned to additional user groups or have access to other Resolver apps.