nerdexam
Isaca

CRISC · Question #573

A MAJOR advantage of using key risk indicators (KRIs) is that they:

The correct answer is D. Identify when risk exceeds defined thresholds. A key advantage of KRIs is their ability to signal when the level of risk approaches or surpasses predetermined thresholds, prompting timely intervention.

Submitted by lucia.co· Apr 18, 2026Risk Response and Reporting

Question

A MAJOR advantage of using key risk indicators (KRIs) is that they:

Options

  • AIdentify scenarios that exceed defined risk appetite.
  • BHelp with internal control assessments concerning risk appetite.
  • CAssess risk scenarios that exceed defined thresholds.
  • DIdentify when risk exceeds defined thresholds.

How the community answered

(55 responses)
  • A
    4% (2)
  • B
    2% (1)
  • C
    7% (4)
  • D
    87% (48)

Why each option

A key advantage of KRIs is their ability to signal when the level of risk approaches or surpasses predetermined thresholds, prompting timely intervention.

AIdentify scenarios that exceed defined risk appetite.

While related to risk appetite, KRIs specifically identify when risk exceeds thresholds, which are often set below or at the risk appetite to provide an early warning.

BHelp with internal control assessments concerning risk appetite.

KRIs help monitor risk, which can inform control assessments, but their primary advantage isn't in aiding the assessment process itself concerning appetite, but rather in signaling risk status.

CAssess risk scenarios that exceed defined thresholds.

KRIs assess risk levels, not primarily "risk scenarios"; scenarios are broader descriptions of potential events, while KRIs track specific metrics to indicate the likelihood or impact of those scenarios.

DIdentify when risk exceeds defined thresholds.Correct

KRIs are designed with specific thresholds, and when these thresholds are breached, it indicates that the risk level has become unacceptable or requires attention, enabling proactive management and response. They act as triggers for risk treatment activities.

Concept tested: Key Risk Indicator (KRI) advantage

Source: https://learn.microsoft.com/en-us/security/benchmark/azure/initiatives-risks-compliance-concepts#risk-indicators

Topics

#Key Risk Indicators#Risk Monitoring#Risk Thresholds#Risk Management

Community Discussion

No community discussion yet for this question.

Full CRISC Practice