Which of the following will MOST likely change as a result of the decrease in risk appetite due to a new privacy regulation?

A decrease in risk appetite means the organization is willing to accept less risk. Key Risk Indicators (KRIs) are metrics used to provide an early warning of increasing risk exposure. When risk appetite decreases, the thresholds for these KRIs must be adjusted downwards to reflect the new, lower acceptable levels of risk, triggering alerts or actions sooner when risks approach or exceed the refined appetite.

Risk trends describe the movement of risk over time; a decrease in risk appetite *influences* trends, but it's not the direct *change* itself.

Key Performance Indicators (KPIs) measure the success of business activities and are less directly impacted by changes in risk appetite than KRIs, which are specifically designed to monitor risk.

While risk objectives might be *influenced* by new regulations, the direct impact of a change in risk appetite is on the acceptable *levels* of risk, which are monitored by KRIs.