Certified in Risk and Information Systems Control (CRISC) — Question 560

Which of the following is the GREATEST concern when establishing key risk indicators (KRIs)?

Answer options

• A. Nonexistent benchmark analysis
• B. Ineffective methods to assess risk
• C. Incomplete documentation for KRI monitoring
• D. High percentage of lagging indicators

Correct answer: B

Explanation

The correct answer is B because ineffective methods to assess risk can lead to inaccurate evaluations of potential threats, undermining the purpose of KRIs. While nonexistent benchmark analysis, incomplete documentation, and a high percentage of lagging indicators are concerns, they do not have as immediate an impact on the effectiveness of risk assessment as the methods used.