nerdexam
Isaca

CRISC · Question #119

Which of the following is the GREATEST concern when establishing key risk indicators (KRIs)?

The correct answer is D. Ineffective methods to assess risk. The greatest concern when establishing KRIs is using ineffective methods to assess risk, as this foundational flaw renders any subsequent KRI development or monitoring unreliable.

Submitted by tom_us· Apr 18, 2026IT Risk Assessment

Question

Which of the following is the GREATEST concern when establishing key risk indicators (KRIs)?

Options

  • AHigh percentage of lagging indicators
  • BNonexistent benchmark analysis
  • CIncomplete documentation for KRI monitoring
  • DIneffective methods to assess risk

How the community answered

(34 responses)
  • A
    3% (1)
  • B
    21% (7)
  • C
    9% (3)
  • D
    68% (23)

Why each option

The greatest concern when establishing KRIs is using ineffective methods to assess risk, as this foundational flaw renders any subsequent KRI development or monitoring unreliable.

AHigh percentage of lagging indicators

While a balance of leading and lagging indicators is ideal for proactivity, a high percentage of lagging indicators is a concern for future insights, but less fundamental than an ineffective initial risk assessment.

BNonexistent benchmark analysis

Nonexistent benchmark analysis limits the ability to compare performance externally, but it doesn't invalidate the intrinsic value of KRIs if they are based on a sound internal risk assessment.

CIncomplete documentation for KRI monitoring

Incomplete documentation for KRI monitoring affects the operational efficiency and auditability of the KRI program, but it's a procedural issue rather than a fundamental flaw in the KRIs' design or relevance.

DIneffective methods to assess riskCorrect

If the foundational methods used to assess risk are flawed, the understanding of risks will be inaccurate, leading to the establishment of Key Risk Indicators (KRIs) that measure the wrong aspects or provide misleading information, making them ineffective for risk management.

Concept tested: Key Risk Indicator (KRI) foundational concerns

Source: https://www.isaca.org/resources/isaca-journal/issues/2012/volume-6/key-risk-indicators

Topics

#Key Risk Indicators (KRIs)#Risk Assessment#KRI Establishment#Risk Management Process

Community Discussion

No community discussion yet for this question.

Full CRISC Practice