What is a Key Risk Indicator (KRI) and how is it used in the risk dashboard?

What is a Key Risk Indicator (KRI) and how is it used in the risk dashboard?

• A. A stakeholder survey to measure risk culture.
• B. A metric signaling rising risk; monitored to trigger action and escalation when thresholds are approached.
• C. A risk register entry used for compliance.
• D. A method of auditing risk exposure after events.

Answer: (B)

A Key Risk Indicator is a metric that signals rising risk and is monitored to trigger action and escalation when thresholds are approached. In a risk dashboard, KRIs provide a forward-looking view of potential problems, showing how close a risk is to breaching its defined limits and whether the risk is trending upward or downward. They let management act before an incident occurs, by alerting owners to take corrective steps when a warning level is reached. KRIs are typically linked to risk appetite and predefined thresholds, with visual cues on the dashboard (for example, color coding and trend arrows) to show when escalation is needed. This differs from a stakeholder survey, which measures risk culture rather than a potential future risk signal; from a risk register entry, which documents identified risks for control and compliance purposes; and from auditing risk exposure after events, which is retrospective rather than predictive.

A Key Risk Indicator is a metric that signals rising risk and is monitored to trigger action and escalation when thresholds are approached. In a risk dashboard, KRIs provide a forward-looking view of potential problems, showing how close a risk is to breaching its defined limits and whether the risk is trending upward or downward. They let management act before an incident occurs, by alerting owners to take corrective steps when a warning level is reached.

KRIs are typically linked to risk appetite and predefined thresholds, with visual cues on the dashboard (for example, color coding and trend arrows) to show when escalation is needed. This differs from a stakeholder survey, which measures risk culture rather than a potential future risk signal; from a risk register entry, which documents identified risks for control and compliance purposes; and from auditing risk exposure after events, which is retrospective rather than predictive.