Proactive Risk Identification: a KCI story

Let me tell you a story. Back in my early days as a risk manager at a big US based bank, we were all about Key Risk Indicators (KRIs). We had a top 10 list, and every month, we’d religiously track them. We worked hard to design them, assign responsible parties and of course track them – Manually, which in itself implied a lot of work-.  We had to present these KRIs at the board of directors every month and we were so proud because they were consistently green!– everything seemed under control.

Fast forward a few months, and reality hit us like a hurricane. We faced a significant risk event, one we thought we were prepared for based on those green KRIs. It was a humbling experience and we learned the hard way that green KRIs don’t really tell the whole picture. But as good risk managers we learn from our mistakes. 

My team focused on finding an answer to the problem and the solution was staring us in the face. Key Control Indicators, They provide timely feedback on the effectiveness of the controls you have in place to mitigate risks. Used properly, they can tell you if your risk management resources are well allocated and even offer a glimpse into the future – a chance to see the “winds shifting” before a storm hits.