With the passage of SOX, audit committees and management are responsible for implementing an effective risk monitoring process. This involves identifying and performing ongoing monitoring of key performance indicators. To help audit committees and management facilitate this process, The Institute of Internal Auditors – UK and Ireland published this guidance on key performance indicators to monitor.