Which of the following is the MOST effective way to help ensure future risk levels do not exceed the organization's risk appetite?

Key Risk Indicators (KRIs) are metrics designed to provide an early signal of increasing risk exposure in a particular area, allowing management to take timely action. By monitoring KRIs, organizations can detect trends or conditions that could cause risk levels to approach or exceed their risk appetite, enabling proactive intervention.

Adding risk triggers to a risk register helps track specific events, but KRIs offer a more continuous, forward-looking view of potential risk levels approaching the appetite, rather than just reacting to defined triggers.

Key Performance Indicators (KPIs) measure the success or efficiency of an activity, but they are not primarily designed to provide an early warning of escalating risk levels that threaten the risk appetite.

Developing contingency plans helps mitigate the impact *after* a risk materializes, but it does not proactively ensure that future risk levels *do not exceed* the risk appetite.