1 – Risk Owner :
The Risk is an ‘uncertainty that matters’ and that affects the objective of the project. So, the question is : “Who does it matters ? “. If it matters to me, I need to think about it, to record it. So I am responsible of managing it. The person who should own the risk is the person who owns the objective that should be affected.
2 – Risk Action Owner :
It can be that I am the Owner of the risk but I can’t do anything about it myself (because it’s not in my power, in my authority or in my competence to manage the risk). So, I need someone else who can help me in which case I can have a Risk Action Owner to work with me or for me in order to manage my risk. So I need help from someone to implement my response strategy.
3 – Conclusion :
In conclusion, there is a difference between the Risk Owner and the Risk Action Owner but in terms of owning risks, the person who owns the objective, owns the risk !
