business owner

A named governance role assigned to the individual or organizational unit that has primary accountability for a mission or business function and for the information systems that directly support it. Distinguished from technical roles such as system owner or system security officer, the business owner operates at the mission/business-process tier of risk management — articulating operational requirements, setting risk tolerance for the supported function, and ensuring that security and privacy controls remain aligned with mission needs throughout the system life cycle. In NIST guidance, mission or business owners appear alongside system owners and information owners/stewards among those with "security and privacy implementation and operations responsibilities," and the NIST RMF Roles and Responsibilities Crosswalk treats "Mission or Business Owner" as a discrete, enumerated role — distinct from, though often coordinating with, the authorizing official, the CIO, and system-level roles. In practice, the business owner is engaged by other governance actors — such as the enterprise architect and the senior information security officer — to ensure that technical architecture requirements

Advisory only. A term this product ships is defined by an authority document, not by a search result.