What is a risk owner?

A person or entity responsible for managing threats and vulnerabilities that they might exploit. Each risk owner should be someone for whom the risk is relevant to their job and who has the authority to do something about it.