An enterprise is approaching the escalation date of a major IT risk. The IT steering committee wants to ascertain who is responsible for the risk response. Where should the committee find this…

A resource management plan outlines how resources are acquired and allocated but typically doesn't detail specific individuals responsible for risk responses.

A RACI (Responsible, Accountable, Consulted, Informed) chart is specifically designed to clarify roles and responsibilities for tasks or decisions, including risk response actions. It precisely identifies who is accountable for ensuring the risk response is carried out and who is responsible for executing the tasks.

A risk management plan describes the overall approach to managing risks, including processes and tools, but usually not the granular, individual responsibilities for specific risk responses.

A risk register lists identified risks, their assessment, and planned responses, but it might not always detail the specific individual or role (beyond a broad owner) responsible for executing each response, which is the primary purpose of a RACI chart for clarifying roles.