Who should the risk scenario be reassigned to?