About this interactive
A risk report often carries indicators tracked over time, so trend lines show whether things are getting better or worse. The Risk Reporting lesson names two kinds.
Key performance indicators (KPIs) measure the health of the business and its systems: how well things are going against goals you want to improve. The lesson's examples are uptime, ticket completion, customer satisfaction and NPS scores.
Key risk indicators (KRIs) track the same health from the side of risk. They are measurements that warn risk is going up, so you can act before it turns into a loss. The lesson's examples include the incident count, project delays, compliance and disaster preparedness. Security+ lists KRIs as part of the risk register.
A quick test: does the number tell you how well the business is performing, or does a rise in it warn that something bad is becoming more likely? Unpatched critical flaws, failed backup tests and overdue audit findings are warnings: KRIs.
The reports themselves go to leadership, the board, the security team, and sometimes customers and partners, as documents, emails or live dashboards, on a schedule or ad hoc.
About TechKnowSurge
TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.
Explore free tools and programs →