Question:
Since operational failures arise from risks related to people, process (model risk, transaction risk, and operational control risk), and systems/technology, can KRI''s point to everything? What areas do KRIs fail to address?
Refer to your research and/or experience as you discuss.