thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

Control Owner

Person accountable for designing, operating, and maintaining a specific control.

Definition

The control owner ensures a control is implemented as designed, operates effectively, and produces evidence for testing. Control owners may differ from risk owners, who decide how much risk to accept. Clear control ownership is essential for audit and continuous monitoring.

Example

The IT operations manager owns the quarterly user access review control.

Exam tip

Risk owner decides treatment; control owner runs the control.

Related terms