What is a key risk indicator?
A key risk indicator is a measurable data point that acts as an early warning sign for a specific risk — tracked over time so that a worsening trend prompts action before the risk turns into a real incident, rather than being discovered only after something goes wrong.
Examples of key risk indicators
- Number of overdue safety inspections or expired permits to work
- Frequency of near-miss incidents
- Percentage of suppliers without current compliance documentation
- Days of cash on hand (a common financial KRI)
- Employee turnover rate in safety-critical roles
KRIs vs. KPIs
Key risk indicators are often confused with key performance indicators (KPIs), but they serve different purposes: KPIs measure how well something is performing, while KRIs measure how exposed the organization is to something going wrong. A strong KPI trend and a worsening KRI trend can exist side by side — for example, output can be rising while risk exposure quietly increases too.
Why KRIs matter
KRIs are what make risk mitigation proactive rather than reactive — without a metric to watch, risk exposure typically isn't noticed until it results in an incident, a compliance failure, or a financial loss.
References
- Key risk indicator — Wikipedia