The responsibility for identifying and implementing the risk response lies with the Process Owner, with the support of AFC-Risk Management to overcome the monitoring gaps identified in the Risk Assessment phase.