A new CEO has been hired by an organization, and the board of directors has made it clear that the new CEO must take more business risk than the previous CEO. The portfolio risk tolerances may need to

Updating the portfolio roadmap adjusts the schedule and sequencing of components but does not capture or institutionalize the changed risk tolerance framework.

Creating what-if scenarios supports the analysis of specific risk events but does not formally record the new organizational risk tolerance in the portfolio's governance artifacts.

The portfolio risk register records risk tolerances, thresholds, and the overall risk appetite that governs how components are evaluated and managed. Updating it ensures that all subsequent risk-related decisions across the portfolio are made within the boundaries established by the new leadership's higher risk tolerance.

Interviewing stakeholders is a data-gathering activity that might inform the update but does not itself constitute the required formal update to the risk register.