Whose responsibility is it when managing company risk relative to people and products--Management, HR, the employees, third parties, board of directors, the investors? Provide an explanation and a specific example for your response.

please include references