nerdexam
Isaca

CRISC · Question #92

Using key risk indicators (KRIs) to illustrate changes in the risk profile PRIMARILY helps to:

The correct answer is A. communicate risk trends to stakeholders. Key Risk Indicators (KRIs) are primarily used to provide early warnings and actionable insights into the organization's evolving risk landscape, making them essential for communicating risk trends to stakeholders. By tracking these indicators, organizations can proactively…

Submitted by tunde_lagos· Apr 18, 2026Risk Response and Reporting

Question

Using key risk indicators (KRIs) to illustrate changes in the risk profile PRIMARILY helps to:

Options

  • Acommunicate risk trends to stakeholders.
  • Bassign ownership of emerging risk scenarios.
  • Chighlight noncompliance with the risk policy
  • Didentify threats to emerging technologies.

How the community answered

(31 responses)
  • A
    90% (28)
  • C
    6% (2)
  • D
    3% (1)

Why each option

Key Risk Indicators (KRIs) are primarily used to provide early warnings and actionable insights into the organization's evolving risk landscape, making them essential for communicating risk trends to stakeholders. By tracking these indicators, organizations can proactively inform stakeholders about changes in the risk profile and potential impacts.

Acommunicate risk trends to stakeholders.Correct

KRIs are leading indicators designed to signal changes in an organization's risk exposure over time. Their primary value is in illustrating these trends, enabling effective and timely communication to relevant stakeholders so they can understand and respond to the evolving risk profile. This proactive communication supports informed decision-making.

Bassign ownership of emerging risk scenarios.

Assigning ownership of emerging risk scenarios is a governance activity related to risk identification and treatment, not the primary function of KRIs themselves, which are for monitoring and signaling.

Chighlight noncompliance with the risk policy

While KRIs might indirectly highlight issues that could lead to noncompliance, their primary purpose is to signal changes in the risk profile, not specifically to flag noncompliance with policies. Compliance monitoring often uses Key Performance Indicators (KPIs) or specific compliance metrics.

Didentify threats to emerging technologies.

KRIs can certainly relate to emerging technologies, but their general purpose is to identify changes in the risk profile across the board, not limited primarily to threats to emerging technologies.

Concept tested: Purpose of Key Risk Indicators (KRIs)

Topics

#Key Risk Indicators (KRIs)#Risk Monitoring#Risk Reporting#Stakeholder Communication

Community Discussion

No community discussion yet for this question.

Full CRISC Practice