Which of the following changes would be reflected in an organization’s risk profile after the failure of a critical patch implementation?

A. Inherent risk is increased.
B. Risk tolerance is decreased.
C. Risk appetite is decreased.
D. Residual risk is increased.