Certified in Risk and Information Systems Control (CRISC) — Question 1347

Which of the following BEST measures the operational effectiveness of risk management capabilities?

Answer options

• A. Capability maturity models (CMMs)
• B. Metric thresholds
• C. Key risk indicators (KRIs)
• D. Key performance indicators (KPIs)

Correct answer: D

Explanation

Key performance indicators (KPIs) are essential for evaluating the effectiveness of risk management operations as they provide measurable metrics that reflect performance against objectives. Capability maturity models (CMMs), metric thresholds, and key risk indicators (KRIs) serve different purposes and do not directly measure operational effectiveness in the same way KPIs do.