Certified in Risk and Information Systems Control (CRISC) — Question 687

Which of the following would prompt changes in key risk indicator (KRI) thresholds?

Answer options

• A. Changes in risk appetite or tolerance
• B. Modification to risk categories
• C. Knowledge of new and emerging threats
• D. Changes to the risk register

Correct answer: A

Explanation

The correct answer, A, is accurate because changes in risk appetite or tolerance directly influence how risks are perceived and managed, necessitating KRI threshold adjustments. Options B, C, and D may also influence risk management but do not directly impact the thresholds for KRIs as significantly as changes in risk appetite do.