mediumMultiple ChoiceObjective-mapped
CRISC Practice Question: Is designing a risk and control monitoring…
An organization is designing a risk and control monitoring program for a new cloud-based application. Which of the following is the MOST important factor to consider when selecting Key Risk Indicators (KRIs)?
⚠ Common exam trap
The trap here is that candidates often prioritize ease of automation or industry benchmarks over strategic alignment, forgetting that KRIs must be tailored to the organization's specific risk profile and business objectives to be effective.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Alignment with strategic objectives.
Alignment with strategic objectives is the most important factor because KRIs must directly measure risks that could impede the organization's business goals and strategic initiatives. For a new cloud-based application, KRIs tied to strategic objectives ensure monitoring focuses on risks that matter most to the business, such as data breaches affecting customer trust or service downtime impacting revenue, rather than irrelevant metrics.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Historical loss data availability.
Why it's wrong here
Historical data may not be available for new applications.
- ✗
Ease of automated data collection.
Why it's wrong here
While desirable, it is not as critical as alignment.
- ✗
Industry best practices.
Why it's wrong here
Best practices are useful but should be adapted to the organization's context.
- ✓
Alignment with strategic objectives.
Why this is correct
KRIs should reflect the organization's risk appetite and objectives to be meaningful.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CRISC question from scratch — 983 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.