A bank recently incorporated blockchain technology with the potential to impact known risk within the organization. Which of the following is the risk practitioner's BEST course of action?

When new technology like blockchain impacts existing risks, a thorough risk assessment is necessary to understand these changes. The risk practitioner's primary action is to then ensure that the outcomes and insights from these assessments are accurately documented and integrated into the organization's risk register and other relevant risk management artifacts, providing an up-to-date view of the risk landscape.

While making information available to stakeholders is important for transparency, it is a communication step that follows the critical action of understanding and documenting the new risk profile.

Effectively supporting a business maturity model is a broader strategic objective, not the immediate and direct best course of action for managing the specific risks introduced by new technology.

Review by the IT steering committee is a governance and oversight step, which would logically occur *after* the risk practitioner has assessed the impact and updated the risk documentation accordingly.