A risk owner is the person assigned accountability and authority to manage a specified risk. In a trading or investment business, that connects a risk report to someone who must assess the exposure, coordinate responses and escalate decisions outside their mandate. A dashboard can identify a funding shortfall; it cannot decide who is responsible for getting a response underway.
The Australian Department of Finance glossary uses accountability and authority together in its definition. A name entered in a spreadsheet without access to information, decision rights or a route to obtain help is a weak ownership arrangement. The title varies by organisation: a risk owner need not be the chief risk officer, a trader or a treasury head.
Start with a risk, then specify the mandate
“Own liquidity” is too vague to guide a difficult decision. A useful assignment states the activity and entity covered, the failure being managed, the information available, the decisions the owner may make, and where larger decisions go. For example: monitor whether this portfolio can meet its cash payments by the stated deadline, coordinate approved funding actions, and escalate any unresolved shortfall to the designated approver.
The mandate should also identify reporting frequency, warning triggers, a deputy and how handovers work. A risk limit may provide one trigger; deteriorating controls or unreliable data can justify escalation before a numerical limit is crossed. Permission to report a limit breach is different from permission to approve an exception.
HM Treasury's Orange Book, written for UK government bodies, emphasises documented authority and accountability, suitable seniority and skills, and timely escalation of changing risks. These are useful design questions for an investment business, rather than universal legal duties imposed by the job label.
A cash deadline makes the distinction visible
Consider a fictional portfolio that must pay USD 12 million at a specified deadline. It has only USD 5 million of cash available in time, leaving a USD 7 million funding gap. Assume all amounts refer to the same currency and deadline, with no other usable receipts or funding already counted. The portfolio may hold valuable securities; their value does not establish that cash can arrive in time. That is the practical problem behind funding liquidity risk.
Under this example's stipulated governance, Maya is the named risk owner. She obtains an updated cash forecast, checks whether proposed responses can actually meet the deadline and escalates the unresolved gap to the designated approver. She can coordinate permitted actions; she cannot assume authority to borrow, sell assets or accept a payment failure beyond her mandate.
Original fictional responsibility map. All amounts are USD millions for the same payment deadline; the reporting and approval roles are stipulated for this example.
A funding action is still a proposal until its availability and timing are established. A settlement check is evidence about a receipt, rather than the receipt itself. Naming Maya supplies no cash and does not remove the USD 7 million gap. Nor does an escalation automatically mean that the recipient has approved a response.
Several people can work on the same risk
| Role | Responsibility in this example | What the label does not establish |
|---|---|---|
| Risk owner: Maya | Maintains the overall assessment, coordinates responses, monitors the remaining exposure and escalates. | Unlimited authority or personal liability for every loss. |
| Action owner: funding lead | Verifies and, if authorised, executes the assigned funding action, with a deadline and evidence of completion. | Ownership of the whole portfolio's liquidity risk. |
| Action owner: settlement lead | Confirms whether expected receipts can arrive before the payment deadline. | A guarantee that a forecast receipt will arrive. |
| Reviewer | Challenges the forecast, assumptions and evidence that controls work. | Authority to approve funding or replacement of the risk owner. |
| Designated approver | Decides on escalated responses within their own delegated authority. | Automatic approval merely because an issue was reported. |
These are functional distinctions for the scenario; organisations may combine some roles where their governance permits. An independent reviewer must retain the independence required by the relevant review arrangement. A trader who creates an exposure can also hold a risk-owner role, but taking a position and overseeing the response to a defined risk are different activities. Delegating an action leaves a need to monitor whether that action resolved the exposure.
Hull's discussion of risk limits links overall limits to individuals managing particular risks and to regular reports checked against actual outcomes. For a portfolio-specific extension, Portfolio Risk Categories for Convert Arb maps market, financing, documentation and other failure mechanisms to different controls. Its full lesson requires membership; a public preview is available.
A useful ownership record therefore ends with evidence: what changed, which action was completed, what residual risk remains, and who has authority to accept or escalate it. Closing a task does not by itself establish that the risk is acceptable within the organisation's risk appetite.
Sources
- Australian Department of Finance, RMG 211, Glossary of Terms, “Risk owner” — accountability, authority and associated treatments; Commonwealth public-sector context.
- HM Treasury, The Orange Book, updated 29 July 2026, Section F, Pillar 2, and Annex 3, Governance and Leadership / Risk Management Processes — assigned roles, documented authority, monitoring and escalation; UK government context.
- John C. Hull, Risk Management and Financial Institutions, 4th edition (Wiley, 2015), §28.1, p. 577 — individual responsibilities, limits and daily reporting. The cash amounts, names and allocation of roles above are original fictional assumptions.