Which of the following is a risk practitioner's BEST course of action upon learning that regulatory authorities have concerns with an emerging technology the organization is considering?

Redesigning Key Risk Indicators (KRIs) is a control monitoring activity that comes after risks are understood and managed, not an initial response to an emerging threat.

Updating risk responses is premature before a thorough assessment of the new threats introduced by regulatory concerns has been conducted.

Conducting a SWOT analysis (Strengths, Weaknesses, Opportunities, Threats) is a broader strategic planning tool, but a focused threat assessment is more direct and specific to addressing regulatory concerns as threats.

Regulatory concerns about emerging technology directly represent potential threats (e.g., fines, non-compliance, legal issues) to the organization. A threat assessment specifically identifies, categorizes, and evaluates these potential threats in the context of the technology, providing clarity on the risks involved and informing further decision-making.