Key performance indicators (KPIs) are metrics that measure the achievement of objectives and the effectiveness of processes. KPIs can help management report on risk by providing quantitative and qualitative information on the risk profile, the risk appetite, the risk response, and the risk outcomes. KPIs can also help monitor and communicate the progress and results of risk management activities, such as risk identification, assessment, mitigation, and reporting. KPIs can be aligned with the strategic,operational, and tactical goals of the organization, and can be tailored to the specific needs and expectations of different stakeholders. References = Risk and Information Systems Control Study Manual, Chapter 4: Risk and Control Monitoring and Reporting, Section 4.2: Key Risk Indicators and Key Performance Indicators, p. 197-199.