When a key risk indicator (KRI) exceeds a threshold but remains within risk appetite, the appropriate next step is to review the trend to determine whether action is needed. This helps in assessing the trajectory of the risk to understand if it is likely to continue increasing and potentially exceed the risk appetite, thereby necessitating proactive measures.