What is the purpose of KRIs in vendor risk reporting?

• A. To indicate early warning signs of risk.
• B. To measure daily revenue.
• C. To track contract renewal dates.
• D. To process invoices.

Answer: (A)

KRIs in vendor risk reporting are metrics that signal when a vendor’s risk level is rising, acting as early warning signs that something could go wrong. By continuously monitoring these indicators, organizations can spot trends, set thresholds, and escalate issues before they escalate into actual problems, enabling proactive risk mitigation, faster response, and informed decisions about vendor relationships or contingency plans. This differs from measuring daily revenue, which is a financial performance metric, tracking contract renewal dates, which is about managing the vendor lifecycle, and processing invoices, which is an operational task rather than a signal of risk.