Certified in Risk and Information Systems Control (CRISC) — Question 546

Which of the following BEST facilitates the identification of appropriate key performance indicators (KPIs) for a risk management program?

Answer options

• A. Consulting risk owners
• B. Evaluating KPIs in accordance with risk appetite
• C. Aligning with industry best practices
• D. Reviewing control objectives

Correct answer: A

Explanation

The correct answer is A because consulting risk owners provides direct insight into the specific risks and objectives they face, ensuring that the KPIs are relevant. The other options, while useful, do not involve direct input from those most knowledgeable about the risks, which can lead to misalignment with actual risk management needs.