Which of the following is BEST measured by key control indicators (KCIs)?

Historical trends of the organizational risk profile are typically measured by Key Risk Indicators (KRIs), which track the level of risk, rather than the effectiveness of individual controls.

The cost efficiency of risk treatment plan projects is a financial or project management metric, not a direct measure of control effectiveness tracked by KCIs.

Comprehensiveness of risk assessment procedures relates to the quality of the risk management process itself, not the operational effectiveness of implemented controls, which is the focus of KCIs.

Key Control Indicators (KCIs) are metrics specifically designed to monitor the performance and effectiveness of security controls, providing insight into how well an organization's layered defense-in-depth strategy is operating.