Where is the FIRST place a risk practitioner should look to identify accountability for a specific risk?

A risk register lists risks and their attributes, but while it might include an owner, it typically does not define the granular level of accountability provided by a dedicated RACI matrix.

A risk scenario describes a potential event, it does not assign accountability for managing that event or its associated risks.

A RACI matrix (Responsible, Accountable, Consulted, Informed) is specifically designed to clarify roles and responsibilities within projects or processes, making it the primary tool for identifying who is definitively accountable for managing a specific risk. It provides a clear, documented assignment of ownership for actions, including risk management.

A risk response plan outlines actions to address a risk, but the RACI matrix typically defines *who* is accountable for executing those actions or for the overall risk, making it the more fundamental source for accountability.