Certified in Risk and Information Systems Control (CRISC) — Question 1421

Which of the following is MOST important to update when an organization's risk appetite changes?

Answer options

• A. Key risk indicators (KRIs)
• B. Risk taxonomy
• C. Key performance indicators (KPIs)
• D. Risk reporting methodology

Correct answer: A

Explanation

Key risk indicators (KRIs) are essential for monitoring risks in relation to an organization's risk appetite. If the risk appetite changes, updating KRIs ensures that the organization can effectively gauge its exposure to risk. The other options, while important, do not directly reflect the immediate need to adjust risk monitoring in response to changes in risk appetite.