The decision to accept risk should be made at the?

The decision to accept risk should be made at the appropriate level.