Certified Information Security Manager (CISM) — Question 361

Which of the following is MOST effective for communicating forward-looking trends within security reporting?

Answer options

• A. Key risk indicators (KRIs)
• B. Key performance indicators (KPIs)
• C. Key control indicators (KCIs)
• D. Key goal indicators (KGIs)

Correct answer: A

Explanation

Key risk indicators (KRIs) are specifically designed to provide insights into potential risks and trends, making them ideal for forward-looking analysis in security reporting. In contrast, key performance indicators (KPIs) focus on measuring current performance, key control indicators (KCIs) assess the effectiveness of controls, and key goal indicators (KGIs) are related to achieving specific objectives, but none are as effective as KRIs for predicting future trends.