Which of the following is MOST important to update when an organization's risk appetite changes?

Key Risk Indicators (KRIs) are metrics used to provide an early warning of increasing risk exposure and monitor whether the organization is operating within its defined risk appetite. If the risk appetite changes, the thresholds and monitoring parameters for KRIs must be adjusted to align with the new level of acceptable risk, ensuring that the organization can effectively track and manage its risk profile according to its revised strategic objectives.

Risk reporting methodology describes how risk information is communicated, but it is less directly impacted by a change in appetite than the metrics themselves.

Key Performance Indicators (KPIs) measure organizational performance, not directly risk exposure or appetite.

Risk taxonomy is the classification of risks, which usually remains stable even if the appetite for those risks changes.