Control Owner Assignment
agresto last edited by
I am in the process of assigning control owners to each control in my company’s RCM for IT. These control owners will be responsible for ensuring the control activity is in operation, and will take full responsibility to remediate if it is found to be deficient.
How should I go about assigning the control owners? My first guess is to simply assign the process owner as the control owner. I’ve also thought about hiring someone to own all of the controls. What is your experience with this / how did you decide who to assign controls to?