Which of the following is the BEST way to identify changes to the risk landscape?

While reviewing the risk register, a risk practitioner notices that different business units have significant variances in inherent risk for the same risk scenario. Which of the following is the BEST course of action?

Which of the following is MOST important for developing effective key risk indicators (KRIs)?

A risk practitioner has established that a particular control is working as desired, but the annual cost of maintenance has increased and now exceeds the expected annual loss exposure. The result is that the control is:

Which of the following should be considered FIRST when creating a comprehensive IT risk register?