Which metric is used to gauge ongoing risk levels to trigger mitigation before incidents occur?

Which metric is used to gauge ongoing risk levels to trigger mitigation before incidents occur?

• A. Latency
• B. KPI
• C. Benchmark
• D. KRI

Answer: (D)

Key risk indicators are used to monitor ongoing risk levels and trigger mitigation before incidents occur. They serve as early warning signals that a risk is rising toward an unacceptable threshold, prompting actions like patching vulnerabilities, tightening access controls, or increasing monitoring to prevent a security event. KPIs measure how well processes meet objectives, not specifically risk exposure. Benchmarks compare performance to others, not the current risk state. Latency is a measure of delay in systems, not a risk indicator. So, the metric that embodies proactive risk awareness and triggers mitigation is the Key Risk Indicator.

Key risk indicators are used to monitor ongoing risk levels and trigger mitigation before incidents occur. They serve as early warning signals that a risk is rising toward an unacceptable threshold, prompting actions like patching vulnerabilities, tightening access controls, or increasing monitoring to prevent a security event. KPIs measure how well processes meet objectives, not specifically risk exposure. Benchmarks compare performance to others, not the current risk state. Latency is a measure of delay in systems, not a risk indicator. So, the metric that embodies proactive risk awareness and triggers mitigation is the Key Risk Indicator.