KRI
Indicador Clave de Riesgo (KRI)
A KRI is a metric that provides early warning of increasing risk exposure. Unlike KPIs that measure past performance, KRIs are forward-looking signals that predict potential problems before they materialize.
Cómo se usa en ciberseguridad
GRC analysts define and monitor KRIs to alert leadership when risk levels approach unacceptable thresholds. Examples include rising phishing click rates, increasing unpatched critical vulnerabilities, or growing third-party vendor risk scores. CISOs use KRI dashboards to make proactive security investment decisions.
Las definiciones son explicaciones originales escritas con fines de desarrollo profesional. Para definiciones técnicas autorizadas, consulta NIST, ISO o el organismo de normalización correspondiente.