System and Information Owners. The system and information owners are responsible for ensuring that proper controls are in place to address integrity, confidentiality, and availability of the IT systems and data they own. Typically the system and information owners are responsible for changes to their IT systems. Thus, they usually have to approve and sign off on changes to their IT systems (., system enhancement, major changes to the software and hardware). The system and information owners must therefore understand their role in the risk management process and fully support this process
