An organization has just started accepting credit card payments from customers via the corporate website. Which of the following is MOST likely to increase as a result of this new initiative?

Risk tolerance is the acceptable deviation around risk appetite and is a measure of an organization's willingness to take on risk, not a direct consequence of a new operational initiative.

Risk appetite is the total amount and type of risk an organization is willing to pursue or retain to achieve its objectives, which is a strategic decision and not automatically increased by a new operational initiative.

Inherent risk is the level of risk present before any controls or mitigations are in place; accepting credit card payments directly introduces new types of threats and vulnerabilities, such as data breaches and fraud, associated with handling financial data, thereby increasing the baseline risk.

Residual risk is the risk remaining after controls have been implemented; an increase in inherent risk may lead to an increase in residual risk if controls are insufficient, but inherent risk is the initial and most direct increase.