Who should drive the risk analysis for an organization?

A.
Senior management

B.
Security manager

C.
Quality manager

D.
Legal department

Explanation:

Although senior management should support and sponsor a risk analysis, the know-how and the management of the project will be with the security department. Quality management and the legal department will contribute to the project.