Which of the following is the GREATEST challenge when developing key risk indicators (KRIs)?

The correct answer is B. Linking KRIs to specific risks. Linking KRIs to specific risks is the greatest challenge because a KRI only has value if it serves as a leading or coincident indicator for a particular, well-defined risk. Without a clear linkage, a metric becomes noise rather than a meaningful signal. Aggregating common KRIs…

Submitted by yuriko_h· Apr 18, 2026Information Risk Management

Question

Options

AAggregating common KRIs
BLinking KRIs to specific risks
CComprehensively reporting on KRIs
DLimiting the number of KRIs

How the community answered

(28 responses)

A
14% (4)
B
79% (22)
C
4% (1)
D
4% (1)

Explanation

Linking KRIs to specific risks is the greatest challenge because a KRI only has value if it serves as a leading or coincident indicator for a particular, well-defined risk. Without a clear linkage, a metric becomes noise rather than a meaningful signal. Aggregating common KRIs (A) is a reporting challenge but is relatively mechanical once KRIs exist. Comprehensive reporting (C) is a presentation challenge. Limiting the number of KRIs (D) is a governance discipline challenge. The hardest intellectual work is establishing which measurable data point reliably signals changes in the likelihood or impact of a specific risk.

Topics

#Key Risk Indicators (KRIs)#Risk Monitoring#Risk Measurement#Risk Management Challenges

Community Discussion

No community discussion yet for this question.

Full CISM Practice