From a risk management perspective, which of the following is MOST important to be tracked in continuous monitoring?