Which of the following should be the MOST important consideration for senior management when developing a risk response strategy?