The risk committee is overwhelmed by the number of false positives included in risk reports. What action would BEST address this situation?

Conducting a full risk assessment is a broader activity to identify and analyze risks, which would not directly address the issue of false positives in existing risk reports generated by specific indicators.

Key risk indicators (KRIs) are metrics used to provide an early signal of increasing risk exposure. If risk reports are generating many false positives, it indicates that the current KRIs, their thresholds, or their definitions are not accurately reflecting true risk, and re-evaluating and refining them will reduce noise and improve report accuracy.

Changing the reporting format might make the false positives look different but doesn't solve the underlying issue of inaccurate or poorly defined indicators generating incorrect alerts.

Adjusting the IT balanced scorecard focuses on performance measurement against strategic objectives and is not designed to directly troubleshoot the accuracy of risk indicator reporting.