CRISC · Question #571
The BEST use of key risk indicators (KRIs) is to provide:
The correct answer is A. Early indication of increasing exposure to a specific risk. Key Risk Indicators (KRIs) are most effectively used to provide an early warning of an increasing likelihood or impact of a specific risk before it materializes into an incident.
Question
The BEST use of key risk indicators (KRIs) is to provide:
Options
- AEarly indication of increasing exposure to a specific risk.
- BLagging indication of major information security incidents.
- CEarly indication of changes to required risk response.
- DInsight into the performance of a monitored process.
How the community answered
(26 responses)- A92% (24)
- B4% (1)
- C4% (1)
Why each option
Key Risk Indicators (KRIs) are most effectively used to provide an early warning of an increasing likelihood or impact of a specific risk before it materializes into an incident.
KRIs are leading indicators designed to monitor the status of risks by tracking specific metrics that predict potential future events or changes in risk levels, enabling proactive risk management. They serve as an early warning system, allowing organizations to intervene and adjust controls before a risk materializes or escalates.
KRIs are leading indicators, not lagging indicators that would report on past incidents.
While KRIs might inform risk response, their primary function is to indicate increasing exposure to risk itself, not directly changes to required response actions.
This describes a Key Performance Indicator (KPI), which focuses on process performance, rather than risk exposure.
Concept tested: Key Risk Indicator (KRI) purpose
Source: https://learn.microsoft.com/en-us/security/benchmark/azure/initiatives-risks-compliance-concepts#risk-indicators
Topics
Community Discussion
No community discussion yet for this question.