What it means
A KRI should connect to a specific risk scenario and provide enough lead time for a decision. It differs from a KPI, which measures performance, and a KCI, which measures control condition or effectiveness.
Why it matters
Well-designed indicators help leaders act before loss occurs and distinguish genuine risk movement from ordinary operational noise.
Practical focus
- Tie each KRI to a named risk and threshold
- Define data source, owner, cadence, and escalation
- Use trend and context rather than a single number
- Retire indicators that do not change decisions
Common mistakes
- Using every available metric as a KRI
- Selecting lagging indicators only
- Setting thresholds with no response plan
- Reporting numbers without explaining risk implications
Certification relevance
This subject appears in or supports the following certification bodies of knowledge: