Which of the following would be of MOST concern regarding the effectiveness of risk management processes?

A. Risk management requirements are not included in performance reviews.
B. Key risk indicators (KRIs) are not established.
C. There is no framework to ensure effective reporting of risk events.
D. The plans and procedures are not updated on an annual basis.