Answer two questions with more than 300 words each. Thanks

1. Describe the role and responsibilities of the "business owner" in a decentralized information security model.  How does this role differ between small and mid-to-large organizations, if at all? 

2. Wheeler begins Chapter 3 referring to risk as a "moving target" impacted by influences within and outside of the organization.  As we are aware, consistent re-evaluation of our environments is a rewarding effort in risk management, so for this first discussion of the week let's explore and deconstruct the following statement:

"The environments that you protect are constantly changing, and this means that you need to account for shifts in threats and exposures in your risk management workflow."

Briefly share your thoughts on the above statement.  Explain your own reasons how risk management is being influenced by the constant change in and out of the organization. Consider naming in your response examples of these forces of influence.