An organization has completed a project to implement encryption on all databases that host customer data. Which of the following elements of the risk register should be updated to reflect this change?

A. Risk tolerance
B. Inherent risk
C. Risk appetite
D. Risk likelihood