Watch this video on YouTube
The operational risk associated with attacks on a web application should be owned by the individual in charge of: