Approach for risk response task approvals and risk lifecycle in general

Hi all, I was wondering what your experiences are, in practice, when it comes to managing the risk lifecycle in ServiceNow and getting approvals for risk mitigation tasks etc. For example, Risk Manager role is the one who reviews e.g. risk mitigation...