Which term represents metrics used to measure success and regulatory compliance?

• A. Automated Access Review
• B. Key Performance Indicators (KPI)
• C. Behavioral Analysis Tools
• D. Centralized Access Process

Answer: (B)

This item tests understanding of metrics used to measure success and regulatory compliance. Key Performance Indicators are the quantifiable measures organizations use to track how well they achieve goals and satisfy compliance requirements. In CIAM, KPIs translate policy and governance goals into concrete numbers you can monitor—for example, how quickly access reviews are completed, how many access violations are detected, or how often audits pass without findings. Because KPIs are defined as measurable metrics, they directly capture performance and compliance status, making them the right concept here.

Automated Access Review describes a repeating process for checking who has access to systems; it’s a workflow rather than a metric. Behavioral Analysis Tools are technologies that monitor user activity for anomalies; they provide data and insights but aren’t the metrics themselves. Centralized Access Process refers to a unified way of granting and revoking access, which is an architectural or procedural approach, not a measurement.