Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
C. provide information needed to take action. Key risk indicators (KRIs) are specific metrics or data points that are monitored to provide early warning signs of potential risks or issues in a security program. These indicators help organizations identify emerging threats, vulnerabilities, or weaknesses in their security posture so that they can take timely and appropriate actions to mitigate those risks. The primary goal of KRIs is to provide actionable information that enables organizations to proactively manage and address security risks.
C. provide information needed to take action.
The primary purpose for defining key risk indicators (KRIs) for a security program is to provide information needed to take action. KRIs help organizations identify and track the most critical risks they face, and allow them to prioritize and allocate resources to effectively mitigate those risks. By monitoring KRIs, organizations can quickly detect and respond to emerging threats, ensuring they are able to take appropriate action to minimize potential harm.