A KRI (Key Risk Indicator) is a metric used to signal changes in the risk level of a third party or supplier portfolio. Unlike KPIs which measure past performance, KRIs are forward-looking: they alert before an incident occurs. They cover the financial, cyber, regulatory and operational dimensions of third-party risk, and form the basis of any active risk monitoring dashboard.