An organization has contracted with a cloud service provider to support the deployment of a new product. Of the following, who should own the associated risk?