Key risk indicator (KRI)

Term
Key risk indicator (KRI)
Exam
CISA & CISM
Definition

A metric that signals changes in risk exposure.

Explained

A KRI is a metric that moves as a specific risk changes, giving early warning before losses occur. Good KRIs are linked to a defined risk, measured from reliable data and tied to thresholds that trigger defined action.

In practice

The number of leavers' accounts still active after 24 hours.

Often confused with
Key performance indicator
Exam angle

A good KRI is linked to a specific risk and has thresholds.

Related

Key performance indicator (KPI) ยท Risk tolerance

More from Glossary