In a public company, which group is PRIMARILY accountable for ensuring sufficient attention and resources are applied to the risk management process?

The Board of Directors holds the ultimate governance responsibility for the organization, including oversight of risk management strategy and ensuring that adequate attention and resources are allocated to it.

Risk officers are responsible for implementing and managing the risk process, but their accountability for ensuring sufficient resources ultimately stems from the board.

Line management is responsible for managing risks within their operational areas but not for the overall strategic allocation of resources to the entire risk management process.

Senior management implements the risk management framework and allocates resources as directed by the board, but the ultimate accountability for sufficient resources rests with the board.