Certified in Risk and Information Systems Control (CRISC) — Question 586

Which of the following is the PRIMARY reason to use key control indicators (KCIs) to evaluate control operating effectiveness?

Answer options

• A. To raise awareness of operational issues
• B. To identify control vulnerabilities
• C. To measure business exposure to risk
• D. To monitor the achievement of set objectives

Correct answer: D

Explanation

The correct answer, D, emphasizes that KCIs are primarily used to monitor whether objectives are being met. While the other options highlight important aspects, such as awareness and identifying vulnerabilities, they are secondary to the main goal of tracking achievement towards set objectives.