Which of the following is MOST important to update following a change in organizational risk...

The risk profile is the most important document to update following a change in organizational risk appetite and tolerance, because it summarizes the current and target state of the organization’s risk exposure, as well as the risk response strategies and actions. The risk profile should reflect the alignment of the organization’s risk appetite and tolerance with its strategic objectives and operational capabilities. Updating the risk profile will help the organization to monitor and manage its risks effectively and efficiently.

References

•ISACA CRISC Review Manual, 7th Edition, Domain 1: IT Risk Identification, Section 1.2.1: Risk Profile

•Risk Profile - ISACA

•What is a Risk Profile? Definition, Examples, and More