Register
Key Risk Indicator Catalogue
This catalogue defines Key Risk Indicators (KRIs) for monitoring enterprise risk across all risk categories. KRIs provide early warning signals that a risk is increasing or that an existing control is degrading. They supplement reactive incident reporting with proactive threshold monitoring.
- Type
- Register
- Version
- 1.1.7
- Date
- 2026-10-22
- Owner
- Chief Risk Officer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Risk Management: Monitoring
- Review frequency
- Annual and upon material change to risk landscape or strategic objectives
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- KRI schema
- Cybersecurity kris
- Privacy kris
- Supplier and third-party kris
- Resilience kris
- Legal and regulatory kris
- AI kris
- Operational kris
- KRI reporting and escalation
Related documents
- risk/
README.md (opens in a new tab) source - Enterprise Risk Management Standardrisk
- Enterprise Risk Register Templaterisk
- Risk Appetite Statement Templaterisk
- AI-Specific Risk Methodology Annexrisk
- Risk Register Procedurerisk
- Enterprise Governance and Risk Management Policyrisk
- Security Incident Response Proceduresecurity
- Security Operations Centre Operating Model Standardsecurity
Next
All Documents