Certified in Risk and Information Systems Control (CRISC) — Question 287

Which of the following would BEST provide early warning of a high-risk condition?

Answer options

• A. Risk assessment
• B. Key risk indicator (KRI)
• C. Risk register
• D. Key performance indicator (KPI)

Correct answer: B

Explanation

The Key Risk Indicator (KRI) is specifically designed to signal potential high-risk conditions before they escalate, making it the best option. In contrast, a Risk Assessment identifies risks, a Risk Register documents them, and a Key Performance Indicator (KPI) measures performance, but none serve the same early-warning purpose as a KRI.