Certified in Risk and Information Systems Control (CRISC) — Question 635

Which of the following is the MOST important use of KRIs?

Answer options

• A. Providing a backward-looking view on risk events that have occurred
• B. Providing an early warning signal
• C. Providing an indication of the enterprise's risk appetite and tolerance
• D. Enabling the documentation and analysis of trends

Correct answer: B

Explanation

The correct answer, B, highlights that KRIs are crucial for providing early warning signals about potential risks, allowing organizations to act proactively. Option A focuses on past events, which is less useful for risk management. Option C relates to understanding risk appetite but does not emphasize the early detection aspect. Option D, while important for analysis, does not capture the proactive nature of KRIs.