When reporting key risk indicators (KRIs) to the board, what information BEST enables risk- based decision-making?

Presenting KRIs alongside the organization's defined risk appetite, risk threshold, and risk tolerance provides the board with the necessary context to understand if current risks are within acceptable limits. This allows them to make informed decisions about whether to accept, mitigate, or transfer risks, as they can directly compare current risk levels against the organization's strategic comfort zones.

Classification of current business risk helps identify risk types but does not provide the crucial context of the organization's acceptable level of risk, which is essential for decision-making.

Emerging industry risk trends and benchmarks provide external context but do not directly reflect the organization's internal stance on risk acceptance, which is critical for making specific organizational decisions.

While costs and resource needs for mitigation are important for implementing decisions, they are considered *after* the board has determined if action is needed based on the risk level relative to appetite and tolerance.