Which of the following is the BEST way to identify changes in the risk profile of an organization? 

Answer options:

A. Monitor key risk indicators (KRIs)
B. Monitor key performance indicators (KPIs)
C. Conduct a gap analysis
D. Interview the risk owner

C