Which of the following is the GREATEST concern related to the monitoring of key risk indicators (KRIs)?

Retaining logs longer than required is a concern for data storage costs and privacy, but it doesn't directly compromise the integrity of the KRI data itself if the original data is preserved.

Reviewing logs annually means the KRI monitoring is infrequent, which is a concern for timeliness of risk response, but it does not inherently corrupt the data's integrity like modification does.

Storing logs in a multi-tenant cloud environment introduces specific security and compliance considerations, but a well-managed cloud environment can still ensure log integrity, whereas modification is a direct breach of that integrity.

For KRIs to be reliable indicators of risk levels, the underlying data, such as logs, must be accurate and untampered. If logs are modified before analysis, the KRI values derived from them will be inaccurate, leading to flawed risk assessments and potentially inappropriate or delayed risk responses, thereby undermining the entire KRI monitoring process and an organization's ability to manage risk effectively.