CORES Key Risk Indicator Development 2

Question 1

When calibrating a KRI threshold, what does the 'amber' zone typically signify?

Accepted Answer

Risk is approaching the limit and management attention is warranted

Answer

The amber zone is an early-warning band indicating the metric is trending toward the red limit, prompting proactive management review.

Question 2

Which data quality attribute is MOST critical when a KRI feeds directly into an executive risk dashboard?

Accepted Answer

Timeliness

Answer

Timeliness ensures decision-makers are acting on current conditions rather than stale information that may misrepresent the current risk state.

Question 3

A KRI for IT system availability shows 99.95% uptime but incidents are increasing. This illustrates which KRI design flaw?

Accepted Answer

Metric averages out localized spikes

Answer

Averaging across long periods or broad system groups can mask concentrated failures, making the KRI misleading despite appearing within tolerance.

Question 4

In the CORES framework, which stakeholder is primarily responsible for validating that a proposed KRI is operationally feasible to collect?

Accepted Answer

Business Line Owner / Data Provider

Answer

The business line owner who generates or stores the underlying data must confirm the metric can be consistently extracted and reported.

Question 5

What is the key difference between a KRI and a Key Performance Indicator (KPI)?

Accepted Answer

KRIs signal potential adverse outcomes while KPIs measure operational efficiency or success

Answer

KRIs are forward-looking signals of risk exposure or vulnerability, whereas KPIs assess how well an organization is achieving its objectives.

(CORES) Certified Operational Risk Executive Specialist Practice Test