Establishing which of the following is the BEST way of ensuring that the emergence of new risk is promptly identified?

A. Regular risk reporting
B. Risk monitoring processes
C. Change control procedures
D. Incident monitoring activities