Certified in Risk and Information Systems Control (CRISC) — Question 1277

Which of the following is the BEST recommendation when a key risk indicator (KRI) is generating an excessive volume of events?

Answer options

• A. Reevaluate the design of the KRIs.
• B. Develop a corresponding key performance indicator (KPI).
• C. Monitor KRIs within a specific timeframe.
• D. Activate the incident response plan.

Correct answer: A

Explanation

The best approach is to reevaluate the design of the KRIs, as this could help identify why they are generating excessive events and allow for adjustments to improve their effectiveness. Developing a KPI (B) does not directly address the issue with the KRI, while monitoring KRIs within a timeframe (C) and activating the incident response plan (D) may not resolve the underlying problem of excessive event generation.