Key risk indicator (KRI)

A key risk indicator (KRI) is a metric that gives early warning that a risk is increasing — before it turns into a loss. Failed logins per day, overdue actions and open critical vulnerabilities are common examples.

Each KRI has green, amber and red thresholds tied to your risk tolerance. When a reading crosses a threshold, the risk owner should act — which is why KRIs are the monitoring heartbeat of enterprise risk management.

Related terms