Metrics question
You are part of the Internal Auditing team in a company. How would you set the KPIs to measure compliance and risk appetite?
- Revolut
- Metrics
- Hard
Practice this question out loud. An AI interviewer asks it, follows up like a real interviewer would, and scores your answer. Type or speak.
Start a mock interview on this question · Mock interview from a job description
What this question tests
Ability to translate an abstract governance mandate into concrete, trackable KPIs for a fintech's internal audit function.
How to approach it
- Clarify risk appetite means the level of risk leadership has explicitly agreed to tolerate, not something audit itself sets.
- Segment KPIs into compliance, whether rules are being followed, and risk appetite, whether operations stay within agreed limits.
- Compliance KPIs: number of regulatory findings, time to remediate audit findings, and percentage of controls tested on schedule.
- Risk appetite KPIs: percentage of exposure limits breached, such as credit concentration or transaction monitoring thresholds, and near-limit breach trends as an early warning.
- Add a guardrail: audit coverage, the percentage of business units audited per cycle, so KPI-chasing doesn't skip high-risk areas.
- Report these to the board or audit committee on a regular cadence tied to actual remediation actions, not just scores.
What a strong answer includes
- Correctly separates compliance from risk appetite, a distinction audit interviewers specifically look for.
- Names concrete, fintech-relevant KPIs like transaction monitoring threshold breaches, appropriate for a company like Revolut.
- Adds audit coverage as a guardrail against gaming the KPIs by avoiding risky areas.
- Ties KPIs to remediation action, not just measurement, showing the metric drives real governance behavior.
Common mistakes
- Conflating compliance and risk appetite into one vague risk score.
- Proposing KPIs with no connection to actual regulatory or business context.
- Ignoring how audit independence itself should be measured.
Likely follow-up questions
- How would you set the actual risk appetite thresholds, and who owns that decision?
- How would you handle a KPI that looks good but coverage is actually shrinking?
- How would these KPIs differ across regulatory jurisdictions?
More metrics questions
- How would you measure the performance and health of a Netflix Original?Microsoft · Metrics · Hard
- Imagine you are the PM in charge of Reactions on Facebook - the new way to interact with posts by using “love”, “haha”, “wow”, “sad”, and “angry” reactions. What would success look like in terms of number of non-like reactions per post at launch and how do you come up with this? Would this number differ by reaction? Why or why not?Meta · Metrics · Hard
- You launched a new signup flow to encourage new users to add more profile information. A/B test results indicate that the % of people that added more information increased by 8%. However, 7 day retention decreased by 2%. What do you do?Google · Metrics · Hard
- Facebook Ads dropped by 20%. Mark Zuckerberg calls you and asks you to fix it. What do you do?Meta · Metrics · Hard
- Imagine you're the product manager for Facebook Marketplace. Since many sellers don't mark items as sold, what existing functionality and metrics could you use to determine whether an item has likely sold?Meta · Metrics · Hard
- Uber has seen a dip in the ride confirmation rate. As a PM at Uber, you are responsible to investigate and fix the issue. How will you go about it?Uber · Metrics · Hard
More questions from Revolut
Learn the skill behind it
Chapters of the AI PM course that teach what this question tests.
- Chapter 9: Prove it paid off: outcomes, economics, and pricing
- Chapter 2: Data fluency: SQL, logs, and reading the truth yourself
- Chapter 14: Get the job: the AI PM interview loop