Question

A risk practitioner monitors a key risk indicator (KRI) for the percentage of privileged accounts without multifactor authentication. The KRI has a warning threshold of 5% and an escalation threshold of 10%. Over the last three monthly reports the value has moved from 3% to 4.2% to 4.9%, remaining below the warning threshold each time. What is the MOST appropriate action for the practitioner to take?

Accepted Answer

Report the upward trend to management and recommend proactive investigation before the threshold is breached

Answer

Take no action because the KRI has not breached the warning threshold

Answer

Immediately lower the warning threshold to 4% so the current value triggers escalation

Answer

Remove the KRI from reporting since it consistently stays within tolerance