Part of the risk management process that allocates responsibility at a senior level for managing key risks. The allocation of risk is supported by a mechanism for reporting issues ultimately to the senior person who has overall responsibility for risk management.