An information security audit identified a risk resulting from the failure of an automated control. Who is responsible for ensuring the risk register is updated...