@jerry d) very capable in risk management & policy / process development, with enough technical knowledge to understand where risks arise in technical systems and to be able to liaise with both the tech people & the business system owners (a.k.a. risk owners) 🙃