Which of the following are measured extensively throughout the organization and into the supply chain?

Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) are fundamental metrics for implementing the principles of ISO 31000. KPIs track progress towards achieving strategic objectives, while KRIs serve as early warning signals for potential threats that could impede that progress. The ISO 31000 framework emphasizes that risk management should be integrated into all organizational activities and processes. This integration extends beyond internal departments to external relationships, such as the supply chain, making the extensive measurement of KPIs and KRIs essential for effective monitoring, review, and continuous improvement of the risk management framework.

B. API's (Application Programming Interfaces) and SDK's (Software Development Kits) are specific tools used in software development, not enterprise-wide performance or risk metrics.
C. PDA's (Personal Digital Assistants) are obsolete electronic devices, and PBA is not a standard acronym for a widely used organizational metric in this context.
D. CMP's (e.g., Crisis Management Plans) are strategic documents, and CAD (Computer-Aided Design) is a specialized software tool, neither of which are metrics measured organization-wide.

1. ISO 31000:2018(en)

Risk management — Guidelines. Clause 6.6

"Monitoring and review

" states that the purpose of this step is to assure and improve the effectiveness of the risk management process. This involves planning

gathering

and analyzing information

and "measuring performance using indicators." KPIs and KRIs are the primary types of such indicators.

2. Fraser

J.

& Simkins

B. J. (Eds.). (2010). Enterprise Risk Management: Today's Leading Research and Best Practices for Tomorrow's Executives. John Wiley & Sons. In Chapter 11

"The Use of Key Risk Indicators to Enhance Enterprise Risk Management

" the authors discuss how KRIs are used to monitor risks across the enterprise

aligning with frameworks like ISO 31000.

3. Scarlat

E.

Chirita

N.

& Bradea

I. A. (2013). Key Risk Indicators (KRIs) – A Powerful Tool for an Effective Risk Management Implementation in Accordance with the New Regulations in the Financial System. Financial Studies

17(2)

114-125. This paper highlights that KRIs are essential for monitoring risk profiles and are applied across business lines

which is a core concept for enterprise-wide frameworks including ISO 31000.

4. University of Twente. (2011). Key Risk Indicators

A study on the identification

development and implementation of Key Risk Indicators (Master's Thesis by M.A.I. van der Veen). Section 2.3 discusses the role of KRIs within Enterprise Risk Management (ERM) frameworks

noting their function in monitoring risk levels and providing timely information for decision-making.