Which role is responsible for the management of a risk assigned to it?