Do you believe that top executives like Senior Team members that don't have the proper SRM training and qualifications/certifications, can ensure/certify that all SRM related objectives have been addressed adequately? To be more precise, do you believe that the Risk Executive function described in NIST and all the obligations and activities that this role includes could be left to top executives (i.e. the CEO) to assign and distribute? If not, what would be the alternative suggestion - hiring a certified SRM officer for this function ?