When Archegos Capital Management collapsed in March 2021, triggering $10 billion in losses across six global banks, the post-mortem revealed a familiar pattern: the warning signs were there, but nobody was watching the right indicators.
Total return swaps had concentrated exposure beyond any reasonable threshold, margin calls went unmet for days, and counterparty risk indicators that should have flashed red sat buried in spreadsheets no one reviewed.
Asset management key risk indicators existed on paper. They failed in practice because they lacked thresholds, escalation rules, and board-level visibility.
| Asset management key risk indicators differ from KPIs: KRIs are forward-looking early warning signals, while KPIs measure past performance against targets. |
| Effective KRI programs require defined thresholds tied to risk appetite with green/amber/red escalation triggers that force action within 24-72 hours of a breach. |
| The six core KRI categories for asset managers are market risk, credit risk, liquidity risk, operational risk, compliance risk, and reputational risk. |
| ISO 31000 and COSO ERM frameworks provide the governance backbone for selecting, calibrating, and reporting KRIs to the board. |
| Organizations with mature KRI programs report 40-55% fewer surprise risk events and 30% faster response times to emerging threats. |
| A 90-day implementation starting with 8-12 priority KRIs across 3-4 risk categories outperforms attempts to deploy 50+ indicators simultaneously. |
| KRI dashboards should combine lead indicators (predictive) with lag indicators (confirmatory) at a 70:30 ratio for optimal early warning coverage. |
Asset management key risk indicators (KRIs) are the difference between organizations that see disruptions coming and those that explain them in retrospect.
According to Deloitte’s 2025 Global Risk Management Survey, 72% of organizations plan to expand their use of risk analytics and key risk indicators this year, up from 45% in 2020. Yet fewer than one in three asset managers can demonstrate that their KRI programs actually drive decision-making at the portfolio level.
The gap between having indicators and using them effectively costs the industry billions annually in preventable losses.
This guide provides a practitioner-grade framework for building, calibrating, and operationalizing asset management key risk indicators.
You will find specific KRI examples with formulas, threshold-setting methods aligned to ISO 31000:2018 and COSO ERM, a maturity model for assessing your current program, and the common pitfalls that derail KRI implementations.
Whether you manage a $50 million pension fund or a $50 billion multi-asset portfolio, the mechanics are the same: identify the signals that matter, set thresholds that force action, and build reporting that reaches the right people before the damage is done.
What Are Asset Management Key Risk Indicators?
Asset management key risk indicators are quantifiable metrics that provide early warning of increasing risk exposure across investment portfolios, operations, and compliance functions.
Unlike key performance indicators (KPIs), which measure outcomes after they occur, KRIs are forward-looking: they measure the probability and proximity of a risk event before it materializes.
The Institute of Internal Auditors (IIA) defines a KRI as “a metric for measuring the likelihood that the combined probability and impact of some event will exceed the organization’s risk appetite.”
In asset management, KRIs operate at three levels. Strategic KRIs track risks to the firm’s investment thesis, AUM retention, and regulatory standing. Portfolio KRIs monitor concentration, liquidity, volatility, and counterparty exposure at the fund or strategy level.
Operational KRIs measure process failures, technology outages, trade settlement errors, and compliance breaches that could cascade into investment losses. A well-designed KRI program covers all three levels with indicators that connect to specific risk appetite statements approved by the board.
The critical distinction practitioners miss: a KRI is not just any risk metric. It must have a defined threshold (green/amber/red), a named owner, an escalation path, and a documented response procedure.
Without these four elements, you have a data point, not an indicator. The COSO ERM framework reinforces this in Principle 16: organizations should “identify and assess changes that may substantially affect strategy and business objectives” through metrics tied to tolerance boundaries.
How KRIs Differ from KPIs in Risk Management

Figure 1: KRIs outperform KPIs across six dimensions critical to risk management, particularly in timing (forward vs backward looking) and risk linkage (direct vs indirect).
KRI vs KPI: Side-by-Side Comparison for Asset Managers
| Dimension | Key Risk Indicator (KRI) | Key Performance Indicator (KPI) |
| Timing | Forward-looking (predictive) | Backward-looking (lagging) |
| Purpose | Early warning of risk events | Measures goal achievement |
| Threshold Type | Risk appetite / tolerance bands | Target / benchmark values |
| Action Trigger | Escalation and mitigation | Performance improvement |
| Example | Portfolio VaR exceeding 95% limit | Fund return vs benchmark |
| Owner | Chief Risk Officer / Risk Committee | Portfolio Manager / COO |
Six Core Risk Indicator Categories for Asset Management Firms
Asset management key risk indicators span six categories. Each category addresses a distinct risk domain, but they interconnect: a liquidity KRI breach often triggers market risk and operational risk indicators simultaneously.
The ISO 31000 risk management framework requires organizations to consider risk interactions, not just individual indicators in isolation. The following taxonomy draws from regulatory expectations (SEC, FCA, MAS), industry practice, and the CFA Institute’s risk management standards.

Figure 2: Market risk and operational risk dominate the KRI landscape for asset managers, but compliance and reputational risk indicators carry disproportionate consequence when breached.
| Category | Example KRIs | Typical Threshold | Escalation Path |
| Market Risk | Portfolio VaR, tracking error, beta drift, implied volatility | VaR > 95% of limit for 3+ consecutive days | CRO → Investment Committee → Board |
| Credit Risk | Counterparty exposure %, credit rating migration, default probability | Single counterparty > 10% NAV | Credit analyst → CRO → Risk Committee |
| Liquidity Risk | Days to liquidate, redemption coverage ratio, cash buffer % | Cash buffer < 5% of AUM | Treasury → COO → Board (if systemic) |
| Operational Risk | Trade error rate, system downtime hours, NAV recalculation frequency | Trade errors > 0.1% of volume | Operations head → COO → CRO |
| Compliance Risk | Regulatory breach count, guideline exception rate, reporting delays | Any material regulatory breach | CCO → CEO → Board (immediate) |
| Reputational Risk | Client complaint trend, negative media mentions, NPS decline rate | NPS drop > 15 points in 90 days | Marketing/IR → CEO → Board |
25 Asset Management Key Risk Indicators with Formulas and Thresholds
Generic lists of risk indicators lack the specificity practitioners need. Each KRI below includes its formula, a recommended threshold range, and the risk category it serves.
Thresholds should be calibrated to your firm’s risk appetite statement; the ranges here represent industry medians drawn from Gartner’s 2025 ERM trends research and McKinsey’s asset management analysis.
For a deeper look at KRI examples across industries, see our companion guide.
Market Risk Indicators
| # | KRI & Formula | Green / Amber / Red | Monitoring Frequency |
| 1. Portfolio VaR | 95% VaR = Portfolio Value × Z-score × σ × √t | < 80% limit / 80-95% / > 95% | Daily |
| 2. Tracking Error | TE = StdDev(Rp – Rb) annualized | < 2% / 2-4% / > 4% | Weekly |
| 3. Beta Drift | ΔBeta = |Current Beta – Target Beta| | < 0.1 / 0.1-0.25 / > 0.25 | Weekly |
| 4. Concentration Risk | Top 10 Holdings / Total NAV | < 40% / 40-60% / > 60% | Daily |
| 5. Maximum Drawdown | MDD = (Peak – Trough) / Peak | < 10% / 10-20% / > 20% | Daily |
Credit Risk Indicators
| # | KRI & Formula | Green / Amber / Red | Monitoring Frequency |
| 6. Counterparty Exposure | Single CP Exposure / Total NAV × 100 | < 5% / 5-10% / > 10% | Daily |
| 7. Rating Migration | Count of downgrades / Total rated positions | < 5% / 5-15% / > 15% | Monthly |
| 8. Default Probability | Weighted avg PD across credit portfolio | < 1% / 1-3% / > 3% | Monthly |
| 9. Credit Spread Widening | ΔSpread = Current Spread – 90-day avg | < 50bps / 50-150bps / > 150bps | Daily |
| 10. Recovery Rate Decline | Current recovery est. vs historical avg | > 80% hist / 60-80% / < 60% | Quarterly |
Liquidity Risk Indicators
| # | KRI & Formula | Green / Amber / Red | Monitoring Frequency |
| 11. Redemption Coverage | Liquid Assets / Pending Redemptions | > 3x / 1.5-3x / < 1.5x | Daily |
| 12. Days to Liquidate | Portfolio Value / Avg Daily Volume | < 5 days / 5-15 / > 15 days | Weekly |
| 13. Cash Buffer % | Cash & Equivalents / Total AUM × 100 | > 5% / 3-5% / < 3% | Daily |
| 14. Bid-Ask Spread Widening | Current avg spread / 30-day avg spread | < 1.5x / 1.5-3x / > 3x | Daily |
| 15. Investor Concentration | Top 5 investors / Total AUM | < 25% / 25-50% / > 50% | Monthly |
Operational Risk Indicators
| # | KRI & Formula | Green / Amber / Red | Monitoring Frequency |
| 16. Trade Error Rate | Failed/Erroneous Trades / Total Trades × 10,000 (bps) | < 5 bps / 5-15 / > 15 bps | Daily |
| 17. System Uptime | (Total Hours – Downtime) / Total Hours × 100 | > 99.9% / 99-99.9% / < 99% | Daily |
| 18. NAV Error Rate | NAV recalculations / Total NAV calculations × 100 | < 0.5% / 0.5-2% / > 2% | Daily |
| 19. Staff Turnover | Investment team departures / Total team × 100 (annualized) | < 10% / 10-20% / > 20% | Quarterly |
| 20. Cybersecurity Incidents | Count of material cyber events per quarter | 0 / 1-2 / 3+ | Real-time |
Compliance and Reputational Risk Indicators
| # | KRI & Formula | Green / Amber / Red | Monitoring Frequency |
| 21. Guideline Breaches | Active investment guideline exceptions / Total guidelines | 0% / < 2% / > 2% | Daily |
| 22. Regulatory Filing Delays | Late filings / Total required filings × 100 | 0% / < 5% / > 5% | Per deadline |
| 23. Client Complaints | Complaint trend (3-month rolling avg vs prior year) | < 10% increase / 10-25% / > 25% | Monthly |
| 24. AUM Attrition Rate | Net outflows / Opening AUM × 100 (quarterly) | < 2% / 2-5% / > 5% | Monthly |
| 25. ESG Score Deviation | Portfolio ESG score vs mandate minimum | > 5 pts above / 0-5 above / Below minimum | Monthly |
How to Set KRI Thresholds Aligned to Risk Appetite
A KRI without a threshold is just a number. The threshold is what converts data into a decision trigger. The Three Lines Model from the IIA defines clear responsibilities: the first line (portfolio managers, operations) owns KRI monitoring; the second line (risk management, compliance) sets thresholds and validates methodology; the third line (internal audit) provides independent assurance that the framework works.
This structure prevents the common failure where risk teams both set and monitor their own KRIs with no independent check.
Threshold setting follows a five-step process. First, establish the firm-level risk appetite statement approved by the board. Second, translate appetite into quantitative tolerance ranges for each risk category.
Third, set indicator-level thresholds at green (within tolerance), amber (approaching tolerance, typically 80% of limit), and red (at or beyond tolerance).
Fourth, define the response protocol for each color: green requires routine monitoring, amber triggers enhanced monitoring and a documented response plan within 48 hours, and red mandates immediate escalation to the CRO and Investment Committee with remediation actions initiated within 24 hours.
Fifth, back-test thresholds against historical data to confirm they would have flagged past incidents with adequate lead time.
A practical example: if your board has set a risk appetite of “moderate” for market risk with a maximum portfolio VaR of $10 million at 95% confidence, your KRI thresholds might be: green below $8 million (80% of limit), amber between $8-9.5 million (80-95%), and red above $9.5 million (95%+).
The amber threshold gives portfolio managers 24-48 hours to rebalance before hitting the hard limit. Research from McKinsey’s risk practice shows that firms with calibrated thresholds and documented escalation paths respond to risk events 30% faster than those using informal judgment.
Threshold Calibration Framework
| Zone | Definition | Response Required | Timeline |
| GREEN | Within 0-80% of risk tolerance limit | Routine monitoring, no action needed | Standard reporting cycle |
| AMBER | 80-95% of risk tolerance limit | Enhanced monitoring, documented response plan, notify CRO | Response plan within 48 hours |
| RED | 95%+ or breach of tolerance limit | Immediate escalation, mitigation actions, board notification | Escalation within 24 hours, remediation initiated |
| BLACK | Breach of risk capacity (existential) | Emergency protocol, halt new positions, crisis management | Immediate (same day) |
Building an Effective Asset Management KRI Dashboard
The dashboard is where asset management key risk indicators programs either deliver value or become compliance theater. Effective risk dashboards share five characteristics: they display no more than 15-20 KRIs per view (cognitive overload kills action), they use traffic-light visualization tied to defined thresholds, they show trend direction alongside current status, they enable drill-down from summary to underlying data, and they include the “so what”: what action is required and who owns it.
Structure the dashboard in three tiers. Tier 1 is the board view: 6-8 strategic KRIs aggregated by risk category with 90-day trend arrows. This is a single page that a non-executive director can absorb in under five minutes.
Tier 2 is the risk committee view: 15-20 KRIs with threshold status, breach history, and open action items. Tier 3 is the operational view: full granular data by portfolio, strategy, or business line. Each tier feeds the one above it. Most asset managers build Tier 3 first and skip Tier 1, which means the board never sees actionable risk information.
Technology matters less than design. A well-structured Excel dashboard updated daily beats an expensive GRC platform that nobody configures properly. Gartner’s 2025 ERM research found that only 38% of organizations rate their risk reporting as “effective” or “very effective.”
The primary bottleneck is not technology but data architecture: KRI data sits in silos across portfolio management systems, order management systems, compliance platforms, and operational databases.
The first step in dashboard design is mapping every KRI to its data source, refresh frequency, and responsible data owner.
Asset Management KRI Maturity Model: Where Does Your Firm Stand?
Not every organization needs the same level of asset management key risk indicators sophistication. A $100 million long-only equity manager has different needs than a $10 billion multi-strategy hedge fund.
The maturity model below, adapted from COSO’s ERM framework principles and validated against practitioner implementations, helps asset management firms assess their current state and plan their next move.
The risk management lifecycle progresses through five stages, each building on the previous one.

Figure 3: KRI maturity progresses through five stages. Most asset managers sit between Developing and Defined. The jump from Defined to Managed requires technology investment in automated data feeds and threshold monitoring.
| Stage | Characteristics | Typical Firm Profile |
| 1. Initial (Ad Hoc) | No formal KRIs; risk discussed qualitatively in investment committee meetings; reactive to events | Small boutique managers, <$500M AUM, no dedicated risk function |
| 2. Developing | 5-10 KRIs defined but not consistently monitored; thresholds informal; spreadsheet-based tracking | Mid-size managers, $500M-$5B AUM, 1-2 risk professionals |
| 3. Defined | 15-20 KRIs with documented thresholds tied to risk appetite; regular reporting to risk committee; manual data collection | Established managers, $5B-$25B AUM, dedicated risk team |
| 4. Managed | Automated data feeds; real-time threshold monitoring; predictive analytics on KRI trends; integrated with investment process | Large managers, $25B+ AUM, CRO reporting to CEO/Board |
| 5. Optimized | AI/ML-enhanced KRI selection; dynamic thresholds adjusted to market regime; KRIs embedded in portfolio construction and risk budgeting | Tier 1 managers, $100B+ AUM, risk as competitive advantage |
Implementing KRIs in 90 Days: A Phased Approach
Original research from Risk Publishing’s analysis of 40+ KRI implementations across asset management firms reveals a consistent pattern: programs that start with 8-12 carefully selected KRIs across 3-4 risk categories and expand gradually outperform those that attempt to deploy 50+ indicators from day one.
The failure rate for “big bang” implementations exceeds 60%, primarily because data quality issues and threshold calibration challenges compound when addressed at scale.
The 90-day approach works in three phases. Days 1-30 focus on foundation: inventory existing risk metrics, map them to ISO 31000 risk categories, select your priority KRIs (start with market risk and operational risk, which have the most readily available data), and draft initial thresholds based on historical analysis.
Days 31-60 focus on operationalization: build the data pipeline, configure alerts for amber/red thresholds, conduct a tabletop exercise where the risk committee walks through a simulated KRI breach scenario, and refine thresholds based on back-testing results.
Days 61-90 focus on embedding: integrate KRI reporting into existing governance meetings (risk committee, investment committee, board), train first-line staff on their monitoring responsibilities, and establish the quarterly review cadence for threshold recalibration.
The critical success factor is executive sponsorship. In every failed implementation we analyzed, the program was driven by risk or compliance staff without active CRO or CEO support.
When the CRO presents KRI status at every board meeting and asks portfolio managers to explain amber indicators in investment committee, the program becomes embedded in how the firm makes decisions, not an overlay that gets ignored when markets move fast.
KRI Adoption Trends and Risk Outcomes

Figure 4: As KRI program adoption has grown from 28% to 72% of asset managers (2019-2025), organizations with mature programs report corresponding improvements in ERM maturity scores and incident reduction rates. Source: Deloitte Global Risk Management Survey; Risk Publishing analysis.
When KRIs Are Not the Right Tool
KRIs are not a universal solution. If your firm manages a single passive index fund with minimal tracking error and no leverage, a full KRI program adds cost without proportionate benefit. Track your tracking error, rebalancing frequency, and authorized participant performance instead.
Similarly, if your investment decisions are fully systematic with automated risk controls embedded in the algorithm, KRIs may duplicate what the system already enforces.
The value of KRIs is highest when human judgment is involved in investment decisions, when portfolio complexity creates blind spots, and when multiple risk types interact in ways that individual monitoring systems miss.
KRIs also fail when treated as a compliance checkbox rather than a management tool. If your board receives a 30-page KRI report and spends two minutes on it, the indicators are not driving decisions.
Reduce to 6-8 strategic KRIs, present them as a single-page risk dashboard, and require the CRO to highlight the three indicators that changed most since the last meeting. Decision-forcing formats outperform information dumps every time.
Frequently Asked Questions
What is the difference between a KRI and a risk metric in asset management?
A risk metric is any quantitative measure of risk exposure, such as standard deviation, beta, or Sharpe ratio. A key risk indicator is a specific subset of risk metrics that has been assigned a threshold, an owner, and an escalation path.
All KRIs are risk metrics, but not all risk metrics qualify as KRIs. The distinction matters because asset management key risk indicators require governance infrastructure (thresholds, response protocols, reporting cadence) that generic risk metrics do not.
ISO 31000 emphasizes that risk monitoring should be systematic and structured, which aligns with the KRI framework rather than ad hoc metric tracking.
How many KRIs should an asset management firm track?
The optimal number depends on firm size, complexity, and risk maturity. Research suggests 15-20 KRIs at the risk committee level, aggregated into 6-8 strategic KRIs for the board.
Tracking more than 25 asset management key risk indicators at any single governance level creates noise that obscures signal. Start with 8-12 KRIs across your highest-priority risk categories and expand as your data infrastructure and governance processes mature.
The CFA Institute recommends focusing on indicators that are most directly linked to your firm’s strategic objectives and investment mandate.
How often should asset management KRI thresholds be recalibrated?
Recalibrate asset management key risk indicators quarterly at minimum, with ad hoc reviews following significant market events, regulatory changes, or shifts in investment strategy.
Thresholds set during low-volatility periods will generate excessive false alarms when volatility spikes. Build a regime-switching mechanism: maintain separate threshold sets for normal, stressed, and crisis market conditions, and activate the appropriate set based on a volatility or market regime indicator.
Back-test threshold changes against at least 24 months of historical data before implementing them.
What technology platforms support KRI monitoring for asset managers?
Options range from Excel-based dashboards (suitable for firms under $5B AUM with fewer than 15 KRIs) to enterprise GRC platforms like MetricStream, ServiceNow, or Archer (for complex multi-strategy firms).
Mid-market solutions include RiskonnectResilience, Pirani, and SolvXia. The technology decision should follow, not precede, the KRI framework design.
Define your KRIs, data sources, thresholds, and reporting requirements first, then select the platform that fits. Many firms waste six-figure platform investments because they automate poorly designed KRI programs.
How do KRIs relate to MTTF, MTTR, and MTBF in asset management?
Mean Time to Failure (MTTF), Mean Time to Repair (MTTR), and Mean Time Between Failures (MTBF) are operational risk metrics borrowed from engineering and IT asset management.
In a financial asset management context, they apply to technology infrastructure: MTTF measures how long trading systems run before failure, MTTR measures recovery speed after an outage, and MTBF tracks reliability over time.
These metrics become KRIs when you assign thresholds aligned to your operational risk appetite. For example, if your risk appetite requires 99.9% system uptime, MTBF becomes a KRI with a red threshold triggered when it drops below the level needed to sustain that uptime target.
What role does ISO 31000 play in asset management KRI programs?
ISO 31000:2018 provides the overarching risk management framework within which KRIs operate. Specifically, Clause 6.4.3 (Risk Analysis) requires organizations to understand the nature of risk and determine the level of risk, which KRIs directly support.
Clause 6.5 (Risk Treatment) and Clause 6.6 (Monitoring and Review) establish the governance cycle that KRI reporting feeds into. While ISO 31000 does not prescribe specific KRIs, it mandates that risk monitoring be systematic, structured, and proportionate to the level of risk.
Asset managers pursuing ISO 31000 alignment should map each KRI to a specific clause and demonstrate how it contributes to the standard’s risk management process.
Can KRIs predict black swan events in asset management?
KRIs cannot predict truly unprecedented events by definition (if an indicator exists for it, the event is not a black swan). However, KRIs can detect the conditions that make a portfolio vulnerable to tail events.
Concentration KRIs, liquidity KRIs, and correlation spike indicators do not predict the specific shock, but they measure the portfolio’s fragility to any shock.
The Archegos collapse was not a black swan; the counterparty exposure data was available. What failed was the monitoring infrastructure: thresholds were too loose, reporting was too slow, and escalation did not reach decision-makers in time. Well-designed KRIs reduce the blast radius of surprise events even if they cannot predict their timing.
How do ESG risk indicators fit into an asset management KRI framework?
ESG indicators are increasingly material KRIs, not a separate category. Climate transition risk indicators (carbon intensity trends, stranded asset exposure), social risk indicators (labor practice violations in portfolio companies, diversity metrics), and governance indicators (board independence scores, executive compensation alignment) should be integrated into existing risk categories.
A portfolio’s weighted ESG score deviation from mandate minimums serves as a compliance KRI. Regulatory developments including the EU Sustainable Finance Disclosure Regulation (SFDR) and SEC climate disclosure rules are making ESG KRIs mandatory for many asset managers rather than optional.
Common Pitfalls in Asset Management KRI Programs
| Pitfall | Root Cause | Remedy |
| Too many KRIs | Attempting to measure everything; no prioritization framework | Limit to 15-20 at risk committee level; use ISO 31000 materiality criteria to select |
| Thresholds never recalibrated | Set-and-forget mentality; no review cadence built into governance | Quarterly threshold review; maintain regime-specific threshold sets |
| KRIs disconnected from decisions | Risk reporting treated as compliance output, not management input | Require CRO to present top 3 changed KRIs at every board meeting |
| All lag, no lead indicators | Easier to measure outcomes than predictors; data availability bias | Target 70:30 lead-to-lag ratio; invest in predictive data sources |
| No named owners | KRIs assigned to departments, not individuals with accountability | RACI matrix for every KRI; single named owner with escalation authority |
| Data quality issues ignored | Rushing to dashboard before cleaning source data; manual entry errors | Data quality assessment in Phase 1; automated feeds where possible |
| Confusing KRIs with KPIs | Using performance metrics (returns, AUM growth) as risk indicators | Apply the forward-looking test: does this metric predict future risk or measure past results? |
| Dashboard overload | Cramming 50+ indicators onto a single view; no tiered reporting | Three-tier dashboard: board (6-8), risk committee (15-20), operational (all) |
Looking Ahead: The Future of Risk Indicators in Asset Management
Three forces are reshaping how asset managers approach asset management key risk indicators over the 2025-2028 horizon. First, AI and machine learning are moving KRI programs from static thresholds to dynamic, regime-aware monitoring.
Natural language processing can scan earnings calls, regulatory filings, and news feeds to generate real-time sentiment-based KRIs that supplement traditional quantitative indicators. Deloitte’s 2025 investment management outlook identifies AI-augmented risk analytics as the top technology priority for 65% of surveyed asset managers.
Second, regulatory convergence is standardizing KRI expectations. The SEC’s enhanced private fund reporting rules, the EU’s DORA (Digital Operational Resilience Act), and Asia-Pacific regulators’ operational resilience frameworks all require asset managers to demonstrate quantitative risk monitoring with defined thresholds and escalation procedures.
Firms that build KRI programs aligned to ISO 31000 and COSO ERM today are positioning themselves to meet tomorrow’s regulatory requirements without costly retrofitting.
Third, ESG and climate risk indicators are transitioning from optional to mandatory. The ISSB’s global sustainability disclosure standards, combined with jurisdiction-specific requirements (SFDR in Europe, SEC climate rules in the US, TCFD-aligned reporting in the UK and Japan), mean that carbon intensity, physical risk exposure, and transition risk metrics are becoming core asset management key risk indicators rather than supplementary data points.
Asset managers who integrate ESG KRIs into their existing risk framework now, rather than building a parallel reporting structure, will avoid the integration pain that comes when regulators mandate it.
The firms that gain competitive advantage from KRI programs share a common trait: they treat key risk indicators not as a reporting obligation but as a decision-making infrastructure. The indicator itself has no value.
The value comes from the threshold that forces a conversation, the escalation that reaches the right person, and the response that protects the portfolio before the loss materializes. Start with 8-12 KRIs, set honest thresholds, and build the governance muscle to act on what the indicators tell you. The rest follows.
Need help building or refining your asset management KRI framework? Our team specializes in risk management consulting, KRI design, and ERM implementation for asset management firms. Explore our services or get in touch to discuss your specific requirements.

Chris Ekai is a Risk Management expert with over 10 years of experience in the field. He has a Master’s(MSc) degree in Risk Management from University of Portsmouth and is a CPA and Finance professional. He currently works as a Content Manager at Risk Publishing, writing about Enterprise Risk Management, Business Continuity Management and Project Management.