From a basic understanding of risk management, a risk register records the risks of an organization, theirits mitigating controls, etc. Who havehas the authority to decide and approve on residual risksrisk level ratingratings after implementing controls?