 risk management position in an organization, with authority to make decisions on risk management issues affecting the organization. This person is usually not the CEO, CFO or COO unless they spend more than 00% of their time directly involved in, and accountable for