These are metrics that are designed to indicate the level of risk that an activity or process poses to an organization. Ideally, a KRI provides advance warning of a potential risk event so that the risk event can be either mitigated or prevented. KRIs can be binary or indicate a scale of risk.