RiskGuard Fix: Assign responsible user to enforce controls.

The auditor should be able to add and assign multiple users. This user is responsible for implementing the particular controls that has been identified in an audit.