Key risk indicators

The difference between a key risk indicator and a metric is that a KRI is supposed to change someone’s behaviour before the loss happens. Most KRI libraries fail that test. They report what already went wrong, in a colour, once a month, to nobody with the authority to act on it.

This is the largest section on the site and it is built around industry specifics rather than generic lists, because a useful indicator is tied to the regulation and failure modes of an actual sector: FFIEC aligned indicators for banks and credit unions, NAIC for insurers, FAA for aviation, FSMA for food and beverage, NERC CIP for energy and utilities, OSHA for construction, FDA for pharmaceuticals, plus law firms, real estate and manufacturing. Alongside those sit the mechanics, including how to build a KRI scorecard, Power BI dashboard examples and a free Excel template.

Set thresholds against risk appetite, then feed results into enterprise risk management and operational risk.