Which of the following would be of GREATEST concern to a risk practitioner reviewing current...

The greatest concern for a risk practitioner reviewing current key risk indicators (KRIs) is that the KRIs’ source data lacks integrity, as this means that the data is inaccurate, incomplete, inconsistent, or outdated, and therefore cannot provide reliable and valid information on the risk level and performance. The KRIs are metrics that measure and monitor the changes in the risk exposure and the effectiveness of the risk response over time. The KRIs’ source data should be collected and verified from credible and relevant sources, and should be updated and maintained regularly. The KRIs’ source data should also be aligned and integrated with the enterprise’s data governance and quality standards. The other options are not the greatest concerns for a risk practitioner reviewing current key risk indicators (KRIs), although they may pose some challenges or limitations. The KRIs are not automated is a concern for the efficiency and timeliness of the KRI reporting and analysis, but it does not affect the integrity of the KRI sourcedata. The KRIs are not quantitative is a concern for the objectivity and comparability of the KRI measurement and prioritization, but it does not affect the integrity of the KRI source data. The KRIs do not allow for trend analysis is a concern for the usefulness and relevance of the KRI communication and decision making, but it does not affect the integrity of the KRI source data. References = Risk and Information Systems Control Study Manual, Chapter 5: Risk and Control Monitoring and Reporting, page 183.