QuestionQ76Verified/Governance and Management of ITCopy linkReport a problemAsk AstroTutorSave questionWhat is the PRIMARY reason an IS auditor would recommend using key risk indicators (KRIs)?ATo keep the risk register updatedBTo eliminate unnecessary riskCTo determine whether risk is changingDTo align resources with the greatest riskShow AnswerAnswerExplanationKRIs provide early warning of changes in risk exposure and enable monitoring of trends in the risk profile. ISACA states that KRIs and their thresholds enable monitoring of changes in risk, and that analyzing KRIs identifies changes or trends in the IT risk profile.Learn moreISACA CRISC ItemISACA Journal: Yet Another Risk Depiction (YARD)Show comments3Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion