Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select 3 answers.
This question asks for 3 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The common mistakes while implementing Key Risk Indicators (KRIs) include: A. Choosing KRIs that are difficult to measure: It is important for KRIs to be measurable and quantifiable. If they are difficult to measure, it can lead to inaccurate or unreliable data, making them ineffective in monitoring and managing risks. C. Choosing KRIs that are incomplete or inaccurate due to unclear specifications: KRIs should be well-defined and have clear specifications to ensure their accuracy and completeness. Unclear or ambiguous specifications can lead to confusion and unreliable results. D. Choosing KRIs that are not linked to specific risk: KRIs should be directly linked to the specific risks they are meant to monitor. Choosing KRIs that are not related to the risks in question can result in ineffective risk management.
Option B is not a common mistake but a good practice. High correlation between KRIs and risks is desirable, as it indicates that the KRIs are effectively capturing and monitoring the associated risks. So, option B is not a common mistake while implementing KRIs.