Which of the following is MOST important to update when an organization’s risk appetite changes?

A. Key risk indicators (KRIs)
B. Risk taxonomy
C. Key performance indicators (KPIs)
D. Risk reporting methodology