Which of the following is the BEST course of action when risk is found to be above the acceptable risk appetite?

A. Execute the risk response plan.
B. Analyze the effectiveness of controls.
C. Maintain the current controls.
D. Review risk tolerance levels.