Which statement about KRIs is most accurate?

• A. They replace risk assessments entirely
• B. They are used only after incidents
• C. They measure only financial losses
• D. They signal rising risk levels and prompt management action before issues materialize

Answer: (D)

Key risk indicators (KRIs) are proactive signals that help management detect rising risk levels before problems occur. They’re used continuously to monitor risk, triggering escalation and preventive actions when thresholds are approached or breached. KRIs support governance by informing decisions and highlighting where controls may need tightening, rather than replacing risk assessments. They aren’t limited to financial losses; they cover operational, compliance, strategic, and reputational risks, and they’re not reserved for after incidents. Because of this, they best describe a mechanism that signals rising risk levels and prompts management action before issues materialize.