» Risk management is everyone’s responsibility. Each person and business unit in an organization “owns” a piece of risk management. Every employee should be involved in managing the risks within his or her part of the organization. Employees also may seek to be aware of risks that may affect their units but are managed by others, such as information technology risks. Employees and business units have these responsibilities regardless of whether the organization has dedicated risk management pers